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Abstract. We give new arguments that improve the known upper bounds on 
the maximal number Nq (g) of rational points of a curve of genus g over a finite 
field ¥q, for a number of pairs {q,g). Given a pair (<?, g) and an integer N, we 
determine the possible zeta functions of genus-g curves over with A'^ points, 
and then deduce properties of the curves from their zeta functions. In many 
cases we can show that a genus-3 curve over with N points must have a 
low-degree map to another curve over Wq , and often this is enough to give us a 
contradiction. In particular, we are able to provide eight previously unknown 
values of Nq(g), namely: Af4(5) = 17, Af4(10) = 27, Ar8(9) = 45, Ari6(4) = 45, 
Afi28(4) = 215, A3 (6) = 14, A9(10) = 54, and Af27(4) = 64. Our arguments 
also allow us to give a non-computer-intensive proof of the recent result of 
Savitt that there are no genus-4 curves over Fg having exactly 27 rational 
points. Furthermore, we show that there is an infinite sequence of q's such 
that for every g with < g < log2 q, the difference between the Weil-Serre 
bound on Nq{g) and the actual value of Nq{g) is at least g/2. 



1. Introduction 

The number N of points on a smooth, absolutely irreducible curve of genus g 
over a finite field is bounded by 

q + 1- 2g^ <N<q + l + 2g^, 

an estimate given by Andre Weil in the 1940s. In 1983, Serre improved this bound 
to 

q + 1 — gm < N < q + I + gm, where m — [2^/q\. 
Serre also introduced the explicit formula; method, which uses numerical conditions 
on the number of points on a curve over extensions of the ground field to obtain 
improved bounds on N , at least when g is large compared to q (specifically, when 
g > [q — ^)/2). Oesterle optimized the explicit formulae method, and the resulting 
bounds on N are the best possible bounds that can be obtained formally using only 
Weil's "Riemann hypothesis" for curves and the fact that for every d > the number 
of places of degree d on a curve is non-negative. But the method does not take the 
geometry of the curves into account, and for this reason it is natural to suspect that 
the Weil-Serre-Oesterle bounds may not be optimal. Indeed, Serre P31 and others 
[SlIinilllllllllllillinilinilinilllllllllillHllS] have shown that in certain cases 
these bounds are not attained. However, in many other cases the bounds provided 
by the explicit formulae method remain the best known, and significant effort has 
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been made to determine whether or not they are met — see the tables of van der 
Geer and van der Vlugt [6], which summarize the work of many authors. The 
purpose of this paper is to provide some new techniques that show that in many 
cases the current upper bounds cannot be met. In particular, we list in Tables [T] 
and [2] the improvements we obtain to the tables in 6J. In Table [3] we list the values 
of q and g for which our improved upper bound meets the known lower bound. 
(The tables in [6j are updated frequently; the latest version can be found at 

: //www . science . uva . nl/~geer/ 
The version of the tables that we will refer to in this paper is dated 18 January 
2002, and is available at the URL mentioned below in the acknowledgments.) 

Our improved bounds are due to the fact that some zeta functions that satisfy the 
numerical conditions of the explicit formulae method are forbidden by a combination 
of geometrical and numerical conditions. Our approach is in the spirit of [T2 l [T3 l fT4 l 
[T5l [m [HI [23] where lists of possible zeta functions were compiled and geometric 
arguments were applied for the purpose of improving the bounds. 

The main theorem that we use to improve the known upper bounds deals with 
a numerical invariant of pairs of abelian varieties. Suppose Ai and A2 are abelian 
varieties over Fg. Let F and V denote, respectively, the Frobenius and Verschiebung 
endomorphisms of AiX A2. Given an element a of the subring Z[F, V] of End(Ai x 
A2), we let gi and g2 be the minimal polynomials of a restricted to Ai and A2, 
respectively, and we define r{a) to be the resultant of gi and g2- Define s{Ai,A2) 
to be the greatest common divisor of the set {r{a) : a e Z[i^, F]}. Note that if 
Ai and A2 have an isogeny factor in common then r{a) = for every a, so that 
s{Ai, A2) — 00. On the other hand, if Ai and A2 share no common isogeny factors 
then r{F) 7^ by the Honda- Tate theorem [30], so that s{Ai,A2) < 00. In other 
words, Hom(Ai,yl2) = {0} if and only if 3(^1,^2) < 00. Also note that the value 
of s{Ai,A2) depends only on the isogeny classes of Ai and ^2- 

Theorem 1. Let Ai and A2 be nonzero abelian varieties over¥q. 

(a) If s{Ai, A2) — 1 then there is no curve C over ¥q whose Jacobian is isoge- 
nous to Ai y. A2. 

(b) Suppose s(Ai,^2) = 2. IJ C is a curve overVq whose Jacobian is isogenous 
to Ai X A2, then there is a degree-2 map from C to another curve D over 
¥q whose Jacobian is isogenous to either Ai or A2. 

One can get upper and lower bounds on s{Ai, A2) by using the following result. 
(Recall that the radical of a nonzero integer is the product of its prime divisors.) 

Theorem 2. Suppose Ai and A2 are abelian varieties overWq with s(Ai,A2) 7^ 0. 
Then s{Ai,A2) divides r{F + V) and is divisible by the radical of r{F + V). 

Theorem [2] shows that Theorem [IJa) is equivalent to a result of Serre [13l [23] 
that states that the Jacobian of a curve is never isogenous to a product Ai x A2 of 
nonzero abelian varieties for which r{F + V) = ±1. 

It is not clear whether there are any similarly strong conclusions to be drawn 
from other values of 3(^1,^2). However, if we make some assumptions about Ai 
and ^2, we can prove that certain other values of 5(^1,^2) prohibit the existence 
of a curve with Jacobian isogenous to Ai x A2 — see Propositions [TT] and [T3l and 
Corollaries [I2] and [H 

Theorem [1] combined with previously known results and some straightforward 
facts about degree-2 maps of curves, allows us to greatly restrict the possible zeta 
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q 


genus 


old upper bound 


new upper bound 


4 


5 


18 


17 


4 


10 


28 


27 


4 


11 


30 


29 


8 


5 


32 


30 


8 


7 


39 


38 


8 


8 


43 


42 


8 


9 


47 


45 


8 


10 


50 


49 


8 


11 


54 


53 


8 


15 


68 


67 


16 


4 


46 


45 


16 


5 


54 


53 


16 


7 


70 


69 


16 


8 


76 


75 


16 


11 


92 


91 


16 


13 


103 


102 


16 


14 


108 


107 


32 


4 < 5 < 8 


q+l+ gm — 2 


g + 1 + gm — 3 


32 


9 < 3 < 15 


(7 + 1 + gm — 2 


g + 1 + gm — 4 


64 


11 < < 27 
anri n ^ ^9 

Oj1H_1 (J -f — _L 


g + 1 + gm — 3 


g + 1 + gm — 5 


128 


4 


217 


215 


128 


6 


261 


258 


128 


8 


305 


302 


128 


9 


327 


322 


128 


11 


371 


366 


128 


15 < 3 < 64 
and g = 1 mod 7 


g + 1 + film 


g + 1 + gm — 4 


128 


16 < g < 65 
and g = 2 mod 7 


g + 1 + 


g + 1 + gm — 5 


128 


10 < 5 < 59 
and 5 = 3 mod 7 


g + 1 + gm 


g + 1 + gm — 4 


128 


18 < 5 < 60 
and 5 = 4 mod 7 


g + 1 + gm 


g + 1 + gm — 6 


128 


5 < 5 < 61 
and g = 5 mod 7 


g + 1 + 


g + 1 + gm — 5 


128 


13 < 5 < 62 
and g = 6 mod 7 


g + 1 + gm 


g + 1 + gm — 7 



Table 1. Improved upper bounds on the number of points on 
curves of certain genera over small finite fields Fg of characteris- 
tic 2. The symbol m is an abbreviation for [2y^]. 
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q 


genus 


old upper bound 


new upper bound 


3 


6 


15 


14 




9 


51 


50 


9 


10 


55 


54 


9 


11 


59 


58 


9 


12 


63 


62 


9 


13 


66 


65 


9 


14 


70 


69 


9 


15 


74 


73 


9 


16 


78 


77 


9 


17 


82 


81 


9 


18 


85 


84 


27 


4 


66 


64 


27 


5 < g < 8 


g + 1 + gm — 2 


g + 1 + gm — 3 


27 


9 < g < 13 


g + 1 + gm — 2 


g + 1 + gm — 5 


27 


14 


164 


163 


81 


13 < g < 17 
and 5 7^ 16 


g + 1 + gm — 2 


g + 1 + gm — 4 


81 


18 < g < 35 


g + 1 + gm — 2 


g + 1 + gm — 5 



Table 2. Improved upper bounds on the number of points on 
curves of certain genera over small finite fields Fg of characteris- 
tic 3. The symbol m is an abbreviation for [2^]. 



q 


genus g 


N,{g) 


4 


5 


17 


4 


10 


27 


8 


9 


45 


16 


4 


45 


128 


4 


215 


3 


6 


14 


9 


10 


54 


27 


4 


64 



Table 3. New values of Nq{g) obtained in this paper. 



functions of curves having a large number A'" of points. For some values of q and 
g these restrictions are strong enough to allow us to immediately eliminate certain 
values of N from consideration. For other combinations of q, g, and N, we can 
quickly eliminate most possible zeta functions and are left with a few special cases 
to consider. For some of these special cases we can use Theorem[IJb) to restrict the 
form of the curves in question to such an extent that a computer search for curves 
with the desired number of points becomes feasible. For one such case, detailed 
in Section [5l we manage to avoid significant computer calculations by extending a 
Galois descent argument used in [23] . 
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The defect of a genus-g curve C over ¥q is the difference between the Weil-Serre 
upper bound for genus-5 curves over ¥q and the number of rational points on C; in 
other words, a curve C has defect k if it has exactly {q + 1 + g[2y/q]) — k rational 
points. Theorem [1] allows us to prove some general results about curves with small 
defect. For example, we have the following theorem for square q. 

Theorem 3. Suppose q is a square. 

(a) If q 4 and g > 2 then there are no defect-2 curves of genus g over ¥q . 

(b) If q 9 and 5 > 3 then there are no defect-3 curves of genus g over ¥q . 

(c) If g > (3(7 + 4r7i — 9)/r7i, where m — then there are no defect-A curves 
of genus g over Fg. 

(d) If q = 2?^^ with e > 2, and if g > 2'^^^ + 2, then there are no defect-A curves 
of genus g over Fg. 

For certain nonsquare q the Weil-Serre bound can be improved via a different 
method. Suppose g is a prime power. We define the defect-0 dimension of q to 
be the smallest positive integer 6 for which there is a (5-dimensional abelian variety 
over Fg with characteristic polynomial of Frobenius equal to (a;^ + mx + qY ■ We 
say that q is exceptional if its defect-0 dimension is greater than 1. 

Theorem 4. Suppose q is a prime power and let S be the defect-0 dimension of q. 
If C is a curve of genus g over Fg, then the defect of C is at least r/2, where 
re [0, (5) is the remainder when g is divided by S. 

TheoremUlsays something nontrivial about q only if q is exceptional, so we would 
like to be able to find the exceptional prime powers. In fact, there is an easy way 
to calculate the defect-0 dimension of a power g of a prime p. Let ly be an additive 
p-adic valuation on Q and let m = [2^]. 

Proposition 5. If q is a square or if q < A then the defect-0 dimension of q is 1. 
If q > A is not a square, then the defect-0 dimension of q is the smallest positive 
integer 6 such that 5v{m) / v^q) is an integer. 

We will prove Theorem [4] and Proposition [5] in Section [3l The proofs will fore- 
shadow the arguments that produce the entries in Table [1] for q — 128. 

It is easy to show that there are infinitely many q of the form 2^*^+^ whose defect- 
dimension is 2e -I- 1; we will provide a proof of this fact in Section [3) For such a q 
we see that a curve of genus g < 2e must have defect at least g/2. The existence of 
these q allows us to prove an interesting fact about the function Nq{g) defined by 

Nq{g) = max{#C(Fg) : C is a genus-g curve over Fg}. 

Corollary 6. There are infinitely many powers q of 2 such that for every g with 
0<g< log2 q we have [q + 1 + g[2y^]) - Nq{g) > g/2. 

In particular, this implies that there is a sequence of pairs (q, g) where g is small 
with respect to q and for which the Weil-Serre bound becomes arbitrarily far from 
the true value of Nq{g). Zieve [3T] has already shown that there is a sequence of 
pairs {q,g) where g/q^ 1/2 and for which all previously- known bounds on Nq{g) 
become arbitrarily far from the true value of Nq{g). 

Savitt |19j recently showed, through extensive computer calculation, that there 
is no genus-4 curve over Fs having exactly 27 rational points. We prove this same 
result in Section [8] with an argument much less dependent on the computer. In [15] 
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it was shown that there are only two possibihties for the zcta function of such a 
curve. We can show that the first zeta function cannot occur by using Theorem[lJb). 
For the second zeta function, we introduce a new argument that generalizes the 
Hermitian form argument used in [16] . We are able to eliminate the second zeta 
function by showing that if A is an abelian variety whose characteristic polynomial 
of Frobenius is where 

f = x^-9x^ + 35a;2 - 72a; + 64, 

then every principal polarization on A is decomposable. To prove this, we show 
that there are no indecomposable unimodular Hermitian forms of rank 2 over the 
ring of integers of the quartic number field defined by /. 

In Section [5] we prove Theorems [TJ [21 and [31 and we provide a number of useful 
corollaries. In Section [3] we prove Theorem [H Proposition [5l and Corollary [6l In 
Section [4] we prove the results mentioned in Tables [T] and [2l although we postpone 
the consideration of some cases to later sections. In Section [5l we use a Galois 
descent argument to show that there is no genus-5 curve over Fg with 31 points. In 
Section [51 we check by exhaustion that there is no genus-4 curve over F27 with 66 
points, that there is no genus-4 curve over F32 with 75 points, and that there is no 
genus-6 curve over F3 with a certain Weil polynomial; these calculations are feasible 
only because Theorem [Hallows us to considerably reduce the spaces we must search 
over. In Section[7lwe show how one can parametrize degree-3 covers of elliptic curves 
in characteristic 3. Originally we had hoped to use this parameterization to show 
show that there is no genus-6 curve over F3 with a certain Weil polynomial and that 
there is no genus-4 curve over F27 with 65 points; however, our original arguments 
were flawed. We sketch correct arguments in the second Appendix. In Section [3 
we use the Hermitian form argument mentioned above to prove Savitt's result that 
there is no genus-4 curve over Fg with 27 points. 

Notation. Throughout this paper a curve over F^ will mean a smooth, projective, 
absolutely irreducible curve. We will denote by Nq{g) the largest N such that there 
is a curve of genus g over ¥q with exactly N rational points. The Weil polynomial of 
an abelian variety over a finite field is the characteristic polynomial of the Frobenius 
endomorphism of the variety. The Weil polynomial of a curve over a finite field is 
the Weil polynomial of its Jacobian. Note that if / € Z[a;] is the Weil polynomial 
of a gemis-g curve C over F,, then the numerator of the zeta function of C is equal 
to x^^ f {1 1 x) . If / is the Weil polynomial of a curve or an abelian variety, say with 
deg/ = 2(7, then there is a degree-g polynomial h <E all of whose roots are 

real, such that f{x) = x^h(x + q/x). We will refer to h as the real Weil polynomial 
of the curve or the abelian variety. 

Acknowledgments. We thank Jean-Pierre Serre for his helpful comments. In the 
course of doing the work described in this paper we used the computer algebra 
systems Pari/GP and Magma [1]. Several of our Magma programs are available on 
the web: start at 

http : //www . alumni . caltech . edu/ "however /biblio . html 

and follow the links related to this paper. We have also placed a copy of the 18 
January 2002 version of the van der Geer-van der Vlugt tables on this site. 
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2. Proofs of Theorems [H [21 and [3] 

In this section we will prove Theorems [TJ [21 and [H as well as some useful corol- 
laries. We begin with a lemma. 

Lemma 7. Suppose B is an abelian variety over ¥q isogenous to a product AiX A2, 
where s{Ai,A2) < 00. Then there exist abelian varieties A'l and A'2, isogenous to 
Ai and A2, respectively, and an exact sequence 

A' ^ A'l X ^ S ^ 

such that the projection maps A'l xA'2^ A[ and A'l x A'2 A'2 give monomorphisms 
from A' to A'i[s] and to A'2[s], where s = 3(^1,^2). 

Suppose in addition that B has a principal polarization fi. Then the pullback of fj, 
to A'l X A'2 is a product polarization Ai x A2, and the projection maps A-^ X A2 — ^ -^1 
and A'l x A'2 — > A'2 give isomorphisms of A' with ker Ai and ker A2. In particular, 
A' is isomorphic to its own Cartier dual. 

Proof. Let (f be an arbitrary isogeny from Ai x A2 to B and let A be the kernel 
of if. Let Gi and G2 be the largest closed subgroup-schemes of Ai and A2 such 
that Gi X G2 is a closed subgroup-scheme of A, let A' = A/(Gi x G2), and let 
A'l = Ai/Gi and A'2 = A2/G2. Then we have an exact sequence 

^ A' ^ A'l X ^2 ^ B ^ 

such that the projection maps give monomorphisms of A' to A'l and A'2. We will 
show that in fact the projection maps take A' to A'i[s] and A'2[s]. 

Let a be an arbitrary endomorphism of A'l x A'2 that lies in Z[i^, V]. (Here we 
use the fact that 1^[F, V] is contained in the endomorphism ring of every abelian 
variety isogenous to Ai x y4.2.) For i = 1, 2 let 5^ be the minimal polynomial of a 
acting on A'^. Then (71(a) and (72(a) both act as on A', because A' can be viewed 
as a subgroup-scheme of both A'l and A'2. But then r{a) must act as on A' as 
well. Since this is true for every a, we see that 5(^1,^2) must kill A'; this shows 
that the projection maps embed A' into A'i[s] and ^2(5]. 

Now suppose B has a principal polarization /i. Let A be the pullback of fi to 
A'l X A'2. Since llom{A'i, A'2) and Hom(A'2, A'^) are both trivial, A must be a product 
polarization Ai x A2. The degree of A is equal to the degree of /i (which is 1) times 
the square of the degree of the isogeny A'l x A'2 ^ B, so we have 

(#A')2 = #kerA = (# ker Ai)(# ker A2), 

where we use # to denote the rank of a finite group-scheme. Since the projection 
maps give monomorphisms from A' to A'l and A'2 , we see that # A' < ^ ker A.; for 
1 = 1 and i — 2. This means that we must have #A' = ^kerA^ for each i, and it 
follows that A' = ker Ai for each i. Since kernels of polarizations are isomorphic to 
their own duals, we obtain the final statement of the lemma. □ 

Proof of Theorem]^ Suppose s{Ai,A2) — 1. Then Lemma [7] shows that every 
abelian variety isogenous to Ai x A2 is a product A'l x A'2. Since s{A'i,A'2) = 
s{Ai, A2) < 00 we see that Hom(A'i, A'2) = {0}, so every polarization on A'l x A'2 is 
a product polarization. In particular, we see that every principal polarization of an 
abelian variety isogenous to Ai x A2 is decomposable, so there can be no Jacobians 
isogenous to Ai x A2. This is the first statement of the theorem. 
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Now suppose that s{Ai,A2) — 2. Apply Lemma [7] and replace Ai and A2 with 
the resulting A[ and A2, so that we have an exact sequence 

^ A ^ Ai X A2 ^ JacC ^ 

where A can be viewed as a subscheme of Ai[2] and ^2 [2]. 

Let jj, be the canonical polarization on Jac C and let A be the polarization on 
Ai X A2 obtained by pulling back /i via if. Lemma[7]shows that A is the product of a 
polarization Ai on Ai and a polarization A2 of A2. Let (1, —1) denote the involution 
of Ai X A2 that acts as 1 on Ai and as —1 on A2. Clearly (1,-1) respects the 
polarization A, because 1 respects Ai and —1 respects A2. Furthermore, (1,-1) acts 
as the identity on A, so it gives rise to an involution /3 on JacC that respects the 
polarization /i. By Torelli's theorem, there exists an involution a of C such that 
either — a* or (3 = —a*. 

Let D be the quotient of C by the involution a, so that there is a degree-2 map 
"0 from C to D with ip = tp o a. Then the morphism ip* : JacD — > JacC gives 
an isogeny from Jac D to the connected component of the subvariety of Jac C on 
which (3 acts as the identity. This subvariety is isogenous to Ai if /3 = a* and to 
A2if/3 = -a*. □ 

We will use Theorem[lJb) in conjunction with some obvious facts about degree-2 
covers of curves, which we state here for convenience. 

Lemma 8. Suppose C and D are curves overVq oj genus gc andgr), respectively, 
and suppose there is a degree-2 map C D. For every integer d > let denote 
the number of degree-d places on C and let bd denote the number of degree-d places 
on D. 

(a) For every odd d we have ad < 26^. 

(b) We have gc > 2g£) — 1, with equality if and only if C ^ D is unramified. 

(c) Let di < ■ ■ ■ < d„ he odd positive integers such that a^. is odd for every i, 
and let r = di + ■ ■ ■ + dn- Then gc > 2gu — 1 + r/2, and equality holds if 
and only if C ^ D is ramified at exactly n places pi, . . . ,pn, where each pi 
has degree di and where the ramification at each pi is tame. 

Proof. Suppose d is odd. Every degree-d place of D has at most 2 degree-d places 
of C lying over it, and every degree-d place of C lies over a degree-d place of D. 
Statement (a) follows immediately. 

Statement (b) is the special case n = of statement (c). 

Let L be the involution of C corresponding to the cover C ^ D. Suppose d is 
an odd number such that ad is odd. Then there is a degree-d place p of C that is 
taken to itself by i. Since p consists of an odd number of geometric points of C, 
there must be a geometric point P in p that is fixed by t, and since all of the 
geometric points in p are conjugate to each other, all of the points in p must be 
fixed by l. These d points must be ramification points of the cover C ^ D. Thus, 
the hypothesis of statement (c) implies that there are at least r ramification points 
in the cover C ^ D. The conclusion of the statement then follows by applying the 
Riemann-Hurwitz formula to the cover C ^ D. □ 

Suppose A is a (^-dimensional abelian variety over Fg and let 

{«!, . . . , Qfg, Si, . . . ,ag) 
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be the multiset of complex roots of the Weil polynomial of A. For each i let 
Xi — —{ai + Si). We will say that A is of type [xi, . . . , Xg]. If A is the Jacobian 
of a curve C we will also say that C and its zeta function are of type [xi, . . . , Xg]. 
Note that the zeta function of a curve of type [xi, . . . , Xg] is given by 

{i-t)ii-qty 

where 

a 

n{t) = Y[{l + Xit + qt^). 

i=l 

Also, if F is the Frobenius morphism of A and if = q/F is the Verschiebung, 
then the characteristic polynomial oi F + V \s equal to h? [t) , where 

a 

Ht) =Y[{t + x,) 

i=l 

is the real Weil polynomial of A. 

Corollary 9. There are no genus-g curves of type [to, . . . , to, to — 2] over ¥q if 
g > (q — 1 + 2m) /m and g > 3, where to — [Sy^g]. 

Proof. We will prove the contrapositive statement. Suppose C is a curve of genus g 
over ¥q with zeta function [to, . . . , to, to — 2]. Then JacC is isogenous to a product 
A X E oi abelian varieties, where E is an elliptic curve over ¥q of type [to — 2] 
and where A is a (g — l)-dimensional abelian variety over of type [to, . . . , to]. 
We see that r{F + V) = 2, so s{A, E) = 2. According to Theorem [H the curve C 
is a degree-2 cover of a curve D whose Jacobian is isogenous to either A or E. If 
JacZ3 ^ A then D has genus 5— 1, and LemmalUb) shows that g < 3. If JacD ^ E 
then D is an elliptic curve with q + m — \ points, and applying Lemma [8l[a) with 
d=l shows that 

q + gm-1 <2q + 2m- 2, 
which gives 5 < ((? — 1 + 2m) /m. □ 

Recall that the defect of a genus-g curve C over ¥q is the difference between the 
Weil-Serre upper bound and the number of rational points on C. 

Corollary 10. There are no defect-2 curves of genus g overWq if g > (g— 1+4to)/to 
and g > 5, where m = [2^yq] . 

Proof. If C has defect 2, then its zeta function must be of one of the seven types 
listed in p5]. For .g > 5, all but two of these types are eliminated by Theorem [Ija). 
The two remaining types are [m, . . . , to, to— 2] and [to, . . . , to, m+\/3—l, to— VS—l]- 
Since we are assuming that g > (g — 1 +4to)/to. Corollary [9] eliminates the former 
possibility, so C must have the latter type. In this case JacC is isogenous to 
the product of a {g — 2)-dimensional abelian variety Ai of type [to, . . . , to] and 
a 2-dimensional abelian variety A2 of type [to + \/3 — 1, to — ^3 — 1]. Applying 
Theorem [Ifb) , we find that C is a double cover of a curve D that is either of type 
[to, . . . , to] or of type [to + VS— 1, to — VS— 1] . In the first case D would have genus 
(? — 2, and Lemma [Hfb) shows that then g < 5. In the second case. Lemma [5l^a) 
with d = 1 gives us 

q + gm - 1 < 2{q + 2m ~ 1), 
which leads to 5 < (g — 1 + Am)/m. □ 
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We have mentioned that we do not know any strong conclusions one can draw 
in general when s{Ai,A2) > 2. However, with a little more information about Ai 
and A2 we can indeed say something. 

Proposition 11. Let A[ and A'2 he abelian varieties over ¥q and let s = s{A[, A!^. 
Suppose that for every Ai isogenous to A'^ and every A2 isogenous to A^, the only 
self-dual finite group-scheme that can he emhedded in hoth Ai[s\ and A2[s\ as the 
kernel of a polarization is the trivial group -scheme. Then there is no curve over ¥q 
with Jacohian isogenous to A'-^ x A'2. 

Proof. Suppose there were such a curve. Then Lemma [7] shows that we can find a 
group-scheme A that fits in an exact sequence 

^ A ^ Ai X yl2 ^ Jac C ^ 

and that can be embedded in both Ai[s] and A2[s]- Furthermore, since JacC has a 
principal polarization, for each i — 1, 2 we have that A is isomorphic to the kernel of 
the polarization of Ai obtained by pulling back the principal polarization of Jac C. 
The hypotheses of the proposition show that A must be the trivial group-scheme, 
so Jac C is isomorphic to the product of two abelian varieties that share no isogeny 
factor. As we have seen, this is a contradiction. □ 

The next corollary describes a situation in which the hypotheses of PropositionfTT] 
are met. 

Corollary 12. Suppose q is a square prime power and n is a squarefree integer 
coprime to q. Let m =^ 2^fq. Then there is no curve over ¥q of type [to, . . . , m, m — 
n] . 

Proof. Let Ai be any abelian variety over isogenous to the product of (g — 1) 
copies of a supersingular elliptic curve over with Weil polynomial -I- mx + q = 
{x -\- Y^)^, and let A2 be any ordinary elliptic curve over F^ with Weil polynomial 
-|- (to — n)x -\- q. Clearly s{Ai , A2) = n. Suppose A is a nontrivial self-dual finite 
group scheme that embeds in both Ai[n] and A2[n] as the kernel of a polarization. 
Since the only polarizations on A2 are the multiplication-by-£ maps for positive 
integers £, we must have A = A2[£] for some divisor £ > 1 oi n. Since A embeds 
in Ai [£] as well, and since the Frobenius F on Ai satisfies F + = 0, we know 
that Frobenius must act as the integer —y/q on A, and hence on A2[£]. This means 
that F -f- y/q = on ^2 [£] , which means that {F -f y/q) /£ is an endomorphism of 
A2. But from the characteristic polynomial of F on A2 we can calculate that the 
characteristic polynomial of {F + ^) j£ on A2 is 

x^ -(nl£)x + {n^ql£^), 

which is not integral. This contradiction shows that no nontrivial self-dual finite 
group-scheme can be embedded in both A\\n\ and v42[n]. By Proposition [TT| there 
is no curve over Fq of type [to, . . . , to, to — n] . □ 

There is another situation in which we can draw conclusions from values of 
5(^1,^2) greater than 2. 

Proposition 13. Suppose C is a curve over Fg whose Jacohian is isogenous to 
the product A x E of an ahelian variety A with an elliptic curve E, and suppose 
that s{A,E) < 00. Then there is an elliptic curve E' isogenous to E for which 
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there is map from C to E' of degree dividing s{A,E), and we have ^C{¥q) < 
siA,E)-#E{¥,). 

Proof. By applying Lemma [7] we find that there are abehan varieties A' and E', 
isogenous to A and E, respectively, and an exact sequence 

^ A' A' X Jac C 

such that the projection maps A' x E' A' and A' x E' ^ E' give monomorphisms 
from A' to A'[s\ and E'[s\, where s — s{A,E). This implies that the composition 
E' ^ A' X E' Jac C is a monomorphism. Let A and /i be the canonical principal 
polarizations on E' and Jac C, respectively. Then the puUback of /i to E' is nX for 
some integer n > 0, and Lemma[7]says that the kernel of the puUback is isomorphic 
to A'. In particular we see that n must divide s. Thus we have a diagram 

E' ^ E' ^ E^ 

I I ± 

JacC — > JacC — ^ JacC 

where the vertical arrow on the right is the dual morphism of the vertical monomor- 
phism E' — > JacC on the left. From this we sec that the composition C JacC 
E' is a map of degree n. In particular, 

#C(F,) < n ■ #E'i¥,) - n ■ #i?(F,) < s ■ #i?(F,). 

□ 

Corollary 14. Let q be a prime power and let n be a positive integer. Let m — 
\2y/q\ . Lf C is a curve over Fg of type [m, . . . , m, to — n], then the genus g of C 
satisfies 

^ (n — l)q — {n — 1)^ + nm 

^ ~ TO 

Proof. According to Proposition [131 there is an elliptic curve E' of defect n and 
a divisor d of n for which there is a degree-d map from C to E' , and the number 
of points on C, which is (7 + 1 + gm — n, is at most n times the number of points 
on E' , which is g + 1 + to — n. It follows from this inequality that 

(n — l)q — (n — 1)^ + nm 



Now we turn to the proof of Theorem [21 Our proof relies on two facts: First, 
a prime p divides the resultant of two monic polynomials in Z[x] if and only if 
the reductions of the polynomials modulo p have a common root in the algebraic 
closure of Fp, and second, the ring Z[F, V] contains no nilpotent elements, so that 
if /3 G Z[F, V] has minimal polynomial to G Z[x], then the subring Z[/3] of Z[F, V] 
is isomorphic to Z[a;]/(TO). 

Proof of Theorem^ Clearly 5(^1,^2) divides r{F + V), because s(Ai, ^2) is de- 
fined to be the greatest common divisor of a set of numbers that includes r{F + V). 
What we must now prove is that if a prime p divides r{F + V) then it also di- 
vides s{Ai, A2). To do this, we must show that for every a in Z[_F', V] the prime p 
divides r(a). 
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Consider an a in 1j[F,V], say a — u{F,V) for some polynomial u £ Z,[x,y]. 
Let Fi and Vi (resp. F2 and V2) be the Frobenius and Verschiebung endomor- 
phisnis of Ai (resp. A2). The fact that p divides r{F + V) shows that there 
arc homomorphisms ipi : 1\Fx + Vi] Fp and "02 '■ ^[-^2 + ^2] ~^ such that 
i/ji (-Fi + V"i ) = ■(/'2 (-^"2 + ^2 ) • Let T = Vi (-P'l + V"i ) and let cr be an element of Fp such 
that (T^ — ra + q = 0. Then the homomorphisms tAi and ^1)2 can be extended to give 
homomorphisms i^ix: Z[Fi,Vi] Fp and ■02: Z[F2,V2] Fp such that V'i(^i) = 
cr = ^2(^2) and '0i(Vi) = t - cr -02(1^2). But then Vi)) = -02(^(^2, V2)), 

so the minimal polynomials of u{Fi, Vi) and u{F2, V2) have a common root in Fp. 
It follows that r(a) is divisible by p. □ 

Using Theorem [T] and the corollaries established so far, we can now prove The- 
orem [3] 

Proof of Theorem^ Suppose g is a square prime power, say q = p^^ for a prime p. 
Of the types of defect-2 zeta- functions listed in [TS], only two are possible when q 
is a square: namely [m, . . . , m, m — 1, m — 1] and [m, . . . , m, m — 2]. The first of 
these is impossible when g > 2 by Theorem [Ij a), so the only possible defect-2 zeta 
function for 17 > 2 is [m, . . . , m, m — 2]. To prove part (a), first assume that p ^ 2. 
Then it follows from Corollary [12] that this zeta function is not possible. If p = 2, 
then m — 2 is not the trace of an elliptic curve when q 7^ 4, so [m, . . . , m, m — 2] is 
not possible in that case either. 

The proof of part (b) is essentially the same. From [19] we see that the only 
possible zeta function for a defect 3 curve when g is a square and g > 3 is 
[m, . . . , TO, m — 3]. (If (7 = 3, then [to — 1, to — 1, to — 1] may be possible; see 16 .) 
If p 7^ 3 then it again follows from Corollary [T^ that this zeta function is not pos- 
sible. If p = 3, then to — 3 is not the trace of an elliptic curve when q 7^ 9, so 
[to, . . . , to, to — 3] is not possible in that case either. 

Now we prove parts (c) and (d). Using the methods of [23] (see also [HI §2]) 
and the tables from [25], we see that for square q there are exactly eight possible 
types for a curve of genus g and defect 4 over Fg. For each type, we list in Table [3] 
the associated real Weil polynomial h evaluated at a; — to (where to = 2^^) and 
the associated Weil polynomial /. 

Suppose that g > (3q -I- 4to — 9)/to, where to — 2y/q. Then Corollary [14] shows 
that the first entry in the table cannot occur. Also, since the inequality we are 
assuming implies that g > {q + 4to — 3) /to as well. Theorem [TJb) and Lemma [UJa) 
can be used to show that the second and fourth entries cannot occur. We also see 
that g > (q + 2m + 3)/to, so Theorem [TJb) and Lemma [Sja) show that the eighth 
entry cannot occur. Finally, Theorem[IJa) shows that the remaining entries cannot 
occur when g > A. This proves part (c). 

Finally, suppose q = 2^*^ with e > 2, and suppose g > 2*^^^ + 2 > 5. Then the first 
four entries listed in Table [J] cannot occur because the Honda- Tate theorem [3D] 
shows the final factor of each of the putative Weil polynomials is not in fact a Weil 
polynomial. (A simple way to check this is to use [U Lem. 3.1.2].) The next three 
entries cannot occur when g > 4 because of Theorem[lJa), as we have noted already. 
That leaves us with the final entry. Once again Theorem [l](b) and Lemma [8l[a) can 
be used to eliminate this possibility, because we have g > 2^~^ + 2. □ 
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Table 4. The possible types of (iefect-4 curves over square fields, 
together with the associated real Weil polynomial h evaluated at 
X — m and the associated Weil polynomial /. 



3. Exceptional prime powers 

In this section we will prove Theorem |4j Proposition [5l and Corollary [6l Before 
we begin, let us define the trace of a monic degree-n polynomial in Q[x] to be — 1 
times the coefficient of a;"~^, and the deficiency of such a polynomial to be its trace 
minus its degree. 

Proof of Theorem^ Let C be a curve of genus g over Fg and let h £ Z[x] be its 
real Weil polynomial. We know that all of the roots of h are real numbers in the 
interval [—2^, 2y/q\ , and the number of points on C is equal to q+l — t, where t is 
the trace of h. Write h — {x + ni)^h2, where /i2 has no factors of (a; + TO). The factor 
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{x + oi h corresponds to the largest isogeny factor of Jac C on which Frobenius 
acts as — m, and up to isogeny this factor must be a power of the smaUest abelian 
variety over ¥q whose real Weil polynomial is a power of a; + m. Thus, the exponent 
e is a multiple of the defect-0 dimension 6 of F^, and we see that the degree (72 of 
/i2 is congruent to g modulo 6. 

Define H € Z[a;] by H{x) — h{x—m—l), so that H = {X—IYH2 for a polynomial 
H2 of degree (72 that has no factors of x — 1 . All of the roots of H are positive real 
numbers, and the number of points on C is g + 1 — T + gm + g, where T is the trace 
of H. The trace T2 of H2 is equal to T — e, and the degree of h2 is equal to g — e, 
so we have 

#Ci¥g) =q + l+gm-T2+g2■ 
ln other words, the defect of the curve C is T2 — 52, which is the deficiency of the 
polynomial H2. 

Now, all of the roots of H2 are positive real numbers, and H2 has no factors of 
X — 1, so a result of Siegel [24] says that the trace of H2 is at least 3/2 times its 
degree. It follows that the deficiency of H2 is at least half its degree. Thus, the 
defect of C is at least 32/2. We already noted that 172 is congruent to g modulo 5, 
so the defect of C is at least r/2, where r E [0, S) is the remainder obtained when 
dividing g by 6. □ 

Proof of Proposition\Ei If / is a monic irreducible polynomial in "Zlx] whose roots 
in the complex plane all have magnitude then there is an exponent e such 
that f^ is the Weil polynomial of a simple abelian variety over Fg. The Honda- 
Tate theorem [3(T includes a recipe for calculating this exponent. Proposition [5] is 
obtained by applying this recipe to either the polynomial x'^ + mx + q {if q is not 
a square) or the polynomial x + ^/q (if q is a square) . We leave the details to the 
reader. □ 

The essence of the following argument appears in [53] . 

Proof of Corollary^ Consider the expression for \/2 in base 2: 

r- bi h-2 b-i 

V2 = 5o + - + ^ + ^ + ... 

where each 6,; is either or 1. Suppose e > is an integer such that be = 1 and 
be+i — 0. Let q — 2^*^+^. Then the base-2 expression for 2y^ is 

2Vg = &o2'=+i + 5i2'= + ... + be2 + be+i + ^ + . . . , 
so the base-2 expression for m = [2y/q] is 

m = 6o2''+^ + 6i2'= + • • • + 6e2 + b^+i- 

Clearly m is even but not a multiple of 4, so if v is the usual additive 2-adic valuation 
of Q we have ^{m) = 1 and ^{q) = 2e + 1. It follows from Proposition [S] that the 
defect-0 dimension of q is equal to 2e -|- 1. If we take g < 2e, then Theorem [5] shows 
that the defect of a genus-g curve over F^ is at least g/2. 

Thus, to prove Corollary [6] we need only show that there are infinitely many e 
with be = 1 and be+i = 0. But there are only two ways in which there could not 
be infinitely many such e: either bi = for all sufficiently large i, or 6i = 1 for all 
sufficiently large i. Neither of these can occur, because V2 is irrational. □ 
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If p is a prime for which the real number y/p is normal in base p — a condition 
one expects every prime to satisfy — then a similar argument shows that there are 
infinitely many exceptional powers of p. 

4. Improved bounds 

In this section we will explain how we obtained the improvements listed in Ta- 
bles [T] and m Some of the entries in the table are immediate consequence of the 
corollaries in Section [2l but other entries require a more detailed analysis. We have 
written a Magma program that carries out some of this analysis for us; let us begin 
by explaining what the program does. 

Given a prime power q and two positive integers g and N, we want to determine, 
if we can, whether there exists a curve of genus g over with N rational points. 
Our program enumerates all of the polynomials that might possibly be the real 
Weil polynomial h of such a curve, where by "might possibly" we mean that 

• all of the roots of h are real numbers in the interval [~2^, 2^/^], and 

• the number of places of degree d (for d = predicted by h are 
non-negative and in accord with the Weil-Serre bounds. 

The enumeration is carried out in one of two ways: If the value of N corresponds to 
a defect of 6 or less, the program uses precomputed tables of totally positive poly- 
nomials of deficiency at most 6 (calculated as in [25]) to list all of the appropriate 
polynomials. Otherwise, the program uses the algorithm from jl4) to compute the 
appropriate ft-'s. For each candidate h, the program then uses the criterion of [30] 
to determine whether h actually is the real Weil polynomial of an isogeny class of 
abelian varieties over Fq. For each h that is a real Weil polynomial, the program 
uses the factorization of h to loop through all of the splittings of the associated 
isogeny class into a product of lower-dimensional isogeny classes. It then computes 
the value of r{F + V) for each such splitting. If r{F + V) — 1 then we know 
from Theorem [l^a) that there is no curve with h as its real Weil polynomial. If 
r{F + V) = 2 then the program tries to use Theorem [Tjjb) and Lemma [S] to show 
that there is no curve with the given real Weil polynomial. (The program only uses 
Lemma [8]Ja) with d = 1, and it only uses Lemma [Sfc) with all of the di less than 
or equal to g.) If one of the isogeny classes in the splitting is an isogeny class of 
elliptic curves and if the conclusion of Proposition [13] is not satisfied, then again we 
know that there is no curve with the given real Weil polynomial. If a polynomial h 
is not eliminated by these filters, the program flags it as such and prints out three 
items: 

(1) The number of places of degree d (for d = 1, . . . ,g) that a curve would have 
to have in order to have h for its real Weil polynomial, 

(2) the factorization of h, and 

(3) a matrix giving the resultants of each pair of prime factors of h. 

Likewise, if a polynomial h is eliminated, the program will print out item (2) above, 
together with an explanation of why it eliminated the polynomial. The program will 
also print out item (1) if it had to calculate that information in order to eliminate 
the polynomial. 

For some specific choices of q, g, and N , our program eliminates all possible real 
Weil polynomials. For other choices there are only a few real Weil polynomials left 
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to consider, and sometimes we can eliminate these by other methods; see Sections [SJ 
[6l and [8] for examples of some of these methods. 

Throughout this section, the symbol m will always stand for the integer [2y/g], 
where q is the prime power currently under discussion. 

It was proven in [23] (see also [151 Prop. 2]) that defect-1 curves are never possible 
when the genus is bigger than 2. We will frequently use this fact without comment. 

4.1. Improvements for q ^ 4. 

The case q — A, g — 5, N — 18. We ran our Magma program for the case q — A, 
g = 5, N = 18. The output is reproduced in the first Appendix. The program finds 
eight polynomials h that might possibly be real Weil polynomials for a genus-5 
curve over F4 with 18 points. The first of the eight possibilities turns out not to be 
a real Weil polynomial; it fails the local criterion given in [3D]. 

The second, fourth, fifth, seventh, and eighth possibilities are eliminated by 
Theorem Ilia). For example, for the fifth possibility, the program finds that h 
factors as (a:; + 2)^(x + 4)(a;^ + 5x + 5). If we let hi be the product of the first and 
second of these factors (as the line 

Splitting = [1, 2 ] 

in the output indicates we should do) and if we let h2 be the third factor, then the 
resultant of the radical of hi and the radical of /i2 is 1. 

The third and sixth possibilities are eliminated by Theorem (TKb) and Lemma [U 
For example, the polynomial h for the third possibility is (a;+l)(a;+2)(a;+3)^(a;+4). 
We can factor this as hih2 where hi = {x + 2) and h2 = {x + l){x + 3)^{x + 4), 
and then the resultant of the radicals of hi and /12 is 2. Thus Theorem[TIb) shows 
that any curve with h as its real Weil polynomial would have to be a double cover 
of a curve D whose real Weil polynomial is either hi or /i2. But if D had hi as 
its real Weil polynomial then it would have 7 points, and this would contradict 
Lemma IHl^a) with 0? = 1; while if D had /12 as its real Weil polynomial then it would 
have genus 4, and this would contradict Lemma|5Kb). This argument is summarized 
in the lines 

Splitting = [ 2 ] 

Reasons: point counts, Riemann-Hurwitz 
of the output. 

So we see that there is no genus 5 curve over F4 with 18 points. A curve with 
17 points is known, so we obtain the first entry in Table |3| 

The cases q — A, g €z {10, 11}. The improvements listed in Table [T] for q — A and 
g G {10, 11} come from running our program. Note that a curve over F4 of genus 
10 with 27 points is known, so we get the second entry in Table |3l 

4.2. Improvements for q~^. 

The cases q — 8, g — 5, N — 32 and 31. Our program shows that no genus-5 curve 
over Fg can have exactly 32 points. 

The case A'^ = 31 is more interesting. Our program shows that if C is a genus-5 
curve over Fg with 31 points, then its real Weil polynomial must be 

h= {x + 5f{x^ + 7x + 8). 
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The resultant oi x + 5 and a;^ + 7a; + 8 is 2, so C is a double cover of a curve D 
whose real Weil polynomial is either {x + 5)^ or x'^ + 7x + 8. If D had {x + 5)^ 
for its real Weil polynomial then D would have genus 3, and this would contradict 
Lemma IHJc) since C has an odd number of rational points. Thus the real Weil 
polynomial of D must he x'^ + 7x + 8. 

We see that the Weil polynomial of C must be 

fc = (x^ + 5a; + 8f{x^ + 7x^ + 2Ax^ + 56a; + 64) 

and the Weil polynomial of D must be 

fa^x^ + 7x^ + 24a;^ + 56a; + 64. 

In Section [5] we will use a Galois descent argument to show that this cannot occur. 

The cases q = 8, g — %,N = A7 and 46. Our program shows that a genus-9 curve 
over Fg cannot have exactly 47 points, and that if such a curve has exactly 46 
points then its real Weil polynomial is either {x + 3) (a; + 4)^(x + 5)"^(a;^ + 7a; + 9) 
or [x + 3)'*(x + 5)^. We will consider each of these two possibilities in turn. 
Suppose C is a genus-9 curve over Fg with real Weil polynomial 

/i = (a; + 3)(x + Af{x + ?>f{x^ + 7x + 9). 

Since the resultant of a; + 5 and (x + 3)(a; + 4)(a;^ + 7x + 9) is 2, the curve C must be 
a double cover of a curve D over Fg whose real Weil polynomial is either (x-l-5)'^ or 
(x + 3)(x-|-4)'^(a;^ -|-7x-t-9). The second option would require D to have larger genus 
than is allowed by Lemma [8jb), so D must have real Weil polynomial (a; + 5)'^. In 
particular, D must have exactly 24 places of degree 1. 

We see from the real Weil polynomial of C that C has no places of degree 2. In 
particular, no rational places of D can be inert in the double cover C ^ D. Since 
C has 46 rational places, it must be the case that 22 of the 24 rational places of D 
split in the cover C ^ D and the other 2 rational places ramify. 

We also see from the real Weil polynomial of C that C has 109 places of degree 3. 
As we argued in the proof of LemmaO the fact that C has an odd number of degree- 
3 places implies that at least one degree-3 place of D ramifies. Thus, at least 5 
geometric points of D ramify in the double cover C ^ D. Since the ramification is 
necessarily wild, each ramification point contributes at least 2 to the degree of the 
different of the cover, which means that the degree of the different is at least 10. But 
the Riemann-Hurwitz formula shows that the degree of the different of the double 
cover C ^ D is equal to 8. This contradiction shows that there is no genus-9 curve 
over Fg with {x -I- 3) (a; -I- 4)^ (a; -I- 5)^(a;^ + 7a; -t- 9) for its real Weil polynomial. 

Suppose C is a genus-9 curve over Fg with real Weil polynomial (a; + 3)"* (a; + 5)^. 
Since the resultant of a; -I- 3 and a; -I- 5 is 2, the curve C must be a double cover of 
a curve D whose real Weil polynomial is either (a; -I- 3)"* or (a; -I- 5)^. But the first 
option is impossible, because in that case D would have only 21 rational points, 
which contradicts Lemma [Sl^a). The second option is impossible as well, because 
in that case the genus-5 curve D would have 34 rational points, whereas we know 
that iVg(5) < 30. 

Thus there are no genus-9 curves over Fg with 46 points. A curve with 45 points 
is known, so we get the third entry in Table [3l 

The cases q — 8, g ^ {7,8, 10, 11, 15}. The improvements we get when q ^ 8 and 
g e {7, 8, 10, 11, 15} can all be obtained by running our program. 
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4.3. Improvements for q = 16. 

The cases q = 16, g G {4,5,7}. These improvements come directly from Theo- 
rem |3l[b). Since a genus-4 curve over Fig with 45 points is known, we obtain the 
fourth entry in Table [3l 

The cases q = 16, g G {8, 11, 13, 14}. The improvements we list in these cases are 
all obtained by running our program. 

4.4. Improvements for q — 32. 

The case q — 32, g = A, N = 75. Suppose C is a genus-4 curve over F32 with exactly 
75 rational points. Then C has defect 2, so it must be of one of the seven types 
listed in [15] . The type [m, to, to — 1, to — 1] is forbidden by Theorem [TJa), and the 
fractional part of 2^32 is small enough to eliminate five of the others. Thus C must 
have type [to, to, to, to— 2], where to = [2^32] — 11. Theorem[T]tells us that C must 
be a double cover of either a genus-3 curve (which is impossible, by Lemma |8l[b)) 
or of an elliptic curve whose Weil polynomial is -f (m — 2)x -I- 32 = a;^ -I- 9a:; -f 32. 
In Section [621 we will show how the set of all genus-4 double covers of such elliptic 
curves can be enumerated. We will see that none of the curves has 75 points. 

The cases q = 32, 5 < g < 15. For q ^ 32 and 5 > 3, a Galois descent argument [15] 
shows that the Weil-Serre upper bound cannot be met, and the previously-known 
best upper bound for 3 < g < 15 was g -I- 1 -I- gm — 2. As we saw above, the only 
possible defect-2 zeta function is of type [to, . . . ,to,to — 2]. However, Corollary [9] 
rules out this type of zcta function when g > 5, so defect 2 is impossible when 
<7>5. 

Likewise, the arguments from the appendix of [19] show that for g > 9 the 
only possible defect-3 zeta function for q = 32 is of type [m, . . . , to, to — 3]. (This 
also depends on the fact that the fractional part of 2\/32 is relatively small.) But 
Corollary [HI shows that then g < 8, so defect 3 is impossible when g > 9. Thus 
our new upper bound is q + 1 + gm — 3 for 5 < 5 < 8, and is g + 1 + gm — 4 for 
9 < g < 15. 

4.5. Improvements for q ~ 64. 

The cases q — 64, 11 < <? < 27, g ^ 12. If 17 = 11, then a curve meeting the Weil- 
Serre bound is not possible due to the results of Korchmaros- Torres [T^ . Defect 2 
is also impossible, by Corollary [TUI 

We know from |;5j that there is also no defect-0 curve when 13 < g < 27, and 
it was shown in [15] that defect 2 is ruled out by the Honda- Tate theorem. But 
Theorem [3| shows that defects 3 and 4 are not possible either, so we get an upper 
bound of q + 1 + gm — 5. 

4.6. Improvements for q — 128. Apart from the case g — 9 and N = 324 
(explained below), all of our improved bounds for q — 128 can be obtained by 
running our program. However, we will take some time here to indicate how the 
structure apparent in the q = 128 results is a consequence of the fact that 128 is 
exceptional (in the terminology of Section [3]) . To simplify our discussion, let us 
introduce some terminology. 

Suppose /i is a monic irreducible polynomial in Z[a;], all of whose roots in C are 
real and have magnitude at most 2y/q. By the Honda- Tate theorem there is an 
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integer e > such that a power h" of h is the real Weil polynomial of an abelian 
variety over ¥q if and only if n is divisible by e. We will say that h'^ is an elementary 
real Weil polynomial. For example, the polynomial {x + 22)^ is an elementary real 
Weil polynomial over F128 • 

We define the defect of a real Weil polynomial h over to be m deg h + trace h, 
where the trace of a polynomial is as defined in Section [3l Note that if C is a curve 
over ¥q of defect d then its real Weil polynomial has defect d. Also, the defect of a 
product of real Weil polynomials is the sum of the defects. 

Suppose h G "Zlx] is the real Weil polynomial of a curve C over F^. Let H{x) = 
h{x — 'm—l), so that all of the roots of H are positive real numbers. One checks that 
the defect of h is the deficiency of H, as defined in Section[3l Smyth [25 has written 
down all irreducible monic polynomials H in Z[x] with totally positive roots and 
with deficiency at most 6, and using Smyth's work and the Honda- Tate theorem 
it is not hard to write down a list of all of the elementary real Weil polynomials h 
over ¥q with defect at most 6. (A Magma program to reproduce Smyth's work is 
available at the URL mentioned in the acknowledgments.) 

There is only one elementary real Weil polynomial of defect 0, namely {x + m)*, 
where S is the defect-0 dimension of q. Let us say that a real Weil polynomial over 
¥q is minimal if it is coprime to x + m. Given the list of elementary real Weil 
polynomials over Fq of defect at most 6, it is a simple matter to make a list of all 
of the minimal real Weil polynomials over F^ of defect at most 6. 

Now suppose one is interested in genus-.g curves C over F, with defect d < 6. The 
real Weil polynomial of C must be of the form {x + m)^h, where /i is a minimal real 
Weil polynomial of defect d. As we just noted, one can easily list these polynomials; 
the task is made even simpler by the fact that only h of certain degrees can occur, 
since n = g — deg h must be a multiple of the defect-0 dimension of q. Furthermore, 
one can use Theorem[lJa) to exclude certain polynomials (x -|- m)"'h. 

For instance, consider the case where q = 128 and g = 2 mod 7, with g > 2. 
There can be no defect-0 curves of genus g because the defect-0 dimension of q 
is 7. There are no defect-1 real Weil polynomials because we took g > 2. The 
only possible defect-2 polynomials are y^^^{y — 1)^ and y^~^(?/^ — 2y — 1), where 
y = X + m, but these are eliminated by Theorem [TJa). The possible defect-3 
polynomials are y^^^{y'^ — 3y-|- 1) and y^~^{y^ — 3y — 1) and y^~^{y'^ — 3y — 2). The 
first two are eliminated by Theorem [Tl^a) , and when g > 9 the third is eliminated 
by Theorem [TJb) and Lemma [51 The possible defect-4 polynomials are — 
Ay — 1) and y^~^{y'^ — Ay + 1) and y^~'^{y — l)(y — 3). The first two are eliminated 
by Theorem [ija), and when g > 9 the third is eliminated by Theorem [T]^b) and 
Lemma [Sj For defect 5 there are several possible polynomials that we cannot 
eliminate using our theorems. Combining all of the above, we see that when g > 9 
is congruent to 2 mod 7, we have A^i28(5) ^ 9 + 1 -I- mg — 5. A similar analysis can 
be done for the other congruence classes modulo 7. 

There is a known curve of genus 4 over F128 with 215 rational points, so we 
obtain the fifth entry in Table [Sj 

The case q — 128, g — 9, 323 < N < 327. The defect-0 dimension of q is 7, so there 
is no defect-0 curve of genus 9. Defect 1 is impossible because g > 2. The cases 
N — 325 and N = 323 are eliminated by our program. The only case remaining is 
N = 324. 
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Our program shows that a gcnus-9 curve C over F128 with 324 points would 
have to have real Weil polynomial [x + 22)''(a;^ + 41a; + 416) and would have to 
be a double cover of a genus-2 curve D with real Weil polynomial + 41a: + 416. 
From their real Weil polynomials, we see that C and D each have 2-rank 1; that 
is, the F2-dimension of the geometric 2-torsion of their Jacobians is 1. But then 
the Deuring-Shafarevich formula (see [29j and the references listed in [2, §3]) shows 
that the double cover C — s- 13 must be unramified, which is clearly impossible. 

4.7. Improvements for q — i. 

The case q = 3, g = 6, N = 15. Running our program on this case leaves us with 
three real Weil polynomials to consider. 

The first is {x + 2)'^{x + 3){x^ + 4^^ + a: - 3). Factoring this as {x + 3) times 
(a: + 2)^(a:'^+4a:-^ + a; — 3) and applying Proposition[Tni we find that a curve with this 
real Weil polynomial must be a triple cover of an elliptic curve with Weil polynomial 
x^ + 3a: + 3. We will show in the second Appendix that no such triple cover can 
have 15 points. 

The second real Weil polynomial we must consider is (a; + 2)^(a;^ + 3a: — l)(a:^ + 
4a: + 2). Factoring this as (a;'^ + 4a; + 2) times (a; + 2)^(a;^ + 3a: — 1) and applying 
Theoremfrfb), we find that a curve with this real Weil polynomial must be a double 
cover of a genus-2 curve with real Weil polynomial (a:^ +4a; + 2). Searching through 
the genus-2 curves over F3, we find that there is exactly one curve with that real 
Weil polynomial; it is given by the equation j/^ = a;^ -I- a;^ -I- a;* -I- a;^ — a; -I- 1. In 
Section [^751 we will show that there is no genus-6 double cover of this curve with 15 
points. 

The third real Weil polynomial we are left to consider is (a: -t- l)^(a: -|- 3)^(.t^ + 
3a;— 1). Writing this polynomial as the product of (a; + 3)^ and (a;+ l)^(a;^ + 3a;— 1) 
and applying Theorem [Ijb), we find that a curve C with this real Weil polynomial 
must be a double cover of a genus-2 curve with real Weil polynomial (a: + 3)^. Such 
a genus-2 curve would have 10 rational points — but this is impossible, because 
N3{2) = 8. 

Thus there is no genus-6 curve over F3 with 15 rational points. A curve with 14 
points is known, so we obtain the sixth entry in Table [H 

4.8. Improvements for q ^ 9. 

The case q — 9, g = 13, = 66. Running our program shows that the only possible 
real Weil polynomial in this case is (a; -I- 2) (a; -I- 4)^ (a; -f 5)^. Writing this polynomial 
as the product of (a; -I- 4)^ with (a; -I- 2)(a: -I- 5)^ and applying Theorem [T]Jb), we see 
that a genus-13 curve C over Fg with 66 points must be a double cover of a curve 
D such that either 

(1) the curve D has 34 rational points and has genus 6, and the double cover 
C — *■ D is ramified at 4 geometric points, or 

(2) the curve D has 42 rational points and has genus 7, and the double cover 
C — > 13 is unramified. 

We note that the real Weil polynomial of C shows that it has no places of degree 2, 
so that no rational point of D can be inert in the double cover C ^ D, and so that 
every degree- 2 place of D must be inert in C ^ D. 

Suppose D has genus 6. Since D has 34 rational points and none of them are 
inert in C ^ D, and since C has 66 rational points, we see that exactly 2 rational 
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points of D arc ramified. Since there are 4 geometric ramification points, a degree-2 
place of D must ramify as well — but we have just seen that every degree-2 place 
of D must be inert, a contradiction. 

Suppose D has genus 7. Since no rational point of D can be inert or ramified in 
the double cover C ^ D, each of the 42 rational points of D must split. But then 
C would have to have 84 rational points, contradicting the fact that it has only 66. 

Thus neither of the two possibilities listed above can hold, and there can be no 
genus-13 curve over Fg with 66 points. 

The cases g = 9, 5 G {9, 10, 11, 12, 14, 15, 16, 17, 18}. The improvements listed in 
Table[2]for g = 9 and 5 e {9, 10, 11, 12, 14, 15, 16, 17, 18} can aU be obtained simply 
by running our program. Note that there is a known genus-10 curve over Fg with 
54 points, so we get the seventh entry in Tabled 

4.9. Improvements for q — 27. 

The cases q — 27, g — 4, N — 66 and N = 65. Suppose C is a genus-4 curve over 
F27 with exactly 66 rational points. Then C has defect 2, and of the seven types 
of zeta function from [15] one is eliminated by Theorem [11^ a) and five more are 
forbidden by the size of the fractional part of 2^/27. The only possibility remaining 
is [to, m,m,m — 2], where to = [2\/27] = 10. Thcorcm[Ti;b) tells us that C must be 
a double cover of either a genus-3 curve (which is impossible, by Lemma [5Jb)) or 
of an elliptic curve whose Weil polynomial is + (to — 2)x + 27 = + 8x + 27. 
In Section WA] we will show how the set of all genus-4 double covers of such elliptic 
curves can be enumerated. We will see that none of the curves has 66 points. 

We show in the second Appendix that there is no genus-4 curve over F27 with 
exactly 65 rational points. 

A genus-4 curve over F27 with 64 points is known, so we obtain the eighth entry 
in Table [3 

The cases q = 27, 5 < g < 13. First we note that [121 Thm. 1] shows that the 
Weil-Serre bound cannot be met when g > 3. 

Now we show that defect 2 is impossible for g > 5. For g > 5 this follows from 
Corollary [TOl When g — 5 Corollary [9] shows that [to, to, m,m,m — 2] is not a 
possible type, and the proof of CoroUarvfTOlshows that the only other possible type 
is [to, to, to, to -|- ^/S — 1, to — a/S — 1] . But this last type is also impossible, because 
the fractional part of 2y/27 is less than -s/S — 1. 

Finally we note that the appendix to [l9j shows that the only defect-3 curves 
over F27 when g > 9 are of type [to, . . . , to, to — 3], and Corollary [14] shows that 
this type is impossible for g > 9. 

The case q = 27, g — 14, N = 164. Our program eliminates this possibility. 

4.10. Improvements for q = 81. 

The cases q = 81, 13 < g < 35, g ^ 16. From [S] and [TUj, we know that no defect-0 
curves are possible for 13 < 5 < 35, g 7^ 16. But defect 2 and 3 are not possible 
either by Theorem [31 so the upper bound for these cases is at most g -I- 1 -I- gm — 4. 
When g > 18 we see from Theorem [31^c) that defect 4 is impossible as well, so our 
new upper bound for 18 < 5 < 35 is g + 1 + gm — 5. 
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4.11. Cases where few Weil polynomials are possible. Wc have tried to use 
our program to obtain further improvements to the upper bounds listed in the van 
der Geer-van der Vlugt tables, but it appears that we have already picked most of 
the low-hanging fruit. For example, for every q listed in the tables, and for every 
g < 10, we have taken the best current upper bound N for Nq{g) and run our 
program on the triple (q, g, N). In each such case, our program indicates that there 
are real Weil polynomials that are not eliminated by the criteria that we built in 
to the program. This is not to say, however, that our methods cannot give further 
improvements in these cases: For instance, for g = 27 and 5 < f/ < 8, a curve 
meeting the best current upper bound would have to be a triple cover of a defect-3 
elliptic curve, and it might be possible to use the description of such covers given 
in Section [7] to enumerate all of the possible curves. 

We mention just two more interesting cases. The smallest genus g for which 
N2{g) is not known is g = 12; it is known that A^2(12) is either 14 or 15. Rimning 
our program on the case q = 2, g = 12, N = 15 took almost 18 hours using 
Magma 2.8 on a 2 GHz Pentium 4, and we found that there are eight possible real 
Weil polynomials to consider. We were unable to eliminate all of these polynomials, 
and we were not able to use them to direct a search for a genus-12 curve with 15 
points. 

On the other hand, running our program on the case q — A, g — 7, N ~ 22 
produces six candidate real Weil polynomials, and by a number of ad hoc arguments 
we were able to eliminate all but one of them from consideration. We find that 
if a genus-7 curve over F4 has 22 points, then its real Weil polynomial must be 
x{x + 2)^(x + 3)'^(a; + 4). Arguments along the lines of those provided in the second 
Appendix can be used to eliminate this possibility as well; we will provide details 
in a forthcoming paper. 

5. A Galois descent argument 

In Section l4?2l we showed that a genus-5 curve C over Fg having exactly 31 points 
must be a double cover of a genus-2 curve D. In this section we will use a Galois 
descent argument to show that the curves C and D and the degree-2 map C ^ D 
can all be defined over F2, and we will show how this leads to a contradiction. 

Let f2 = x^ + x'^ + 2x + 4 and let 52 — x'^ ~ x + 2. Let tt be a root of /2 in Q 
and p be a root of 52 in Q- Let 

fs = x^ + 7x^ + 24:x^ + 56x + 64 and gs = x^ + 5x + 8. 

Note that tt^ is a root of /g and that is a root of gg. The arguments from 
Section 14.21 show that it will suffice for us to prove the following: 

Proposition 15. There is no genus-5 curve o^er Fg with Weil polynomial /ggf. 

Proof. We know from Section 14.21 that any such curve must be a double cover of a 
genus-2 curve D with Weil polynomial /g. Let us first identify the curve D. 

Claim. There is exactly one principally polarized abelian surface over Fg with Weil 
polynomial equal to /g. It is the polarized Jacobian of the curve y'^ + xy — x^ + x. 

Proof. Every such principally-polarized variety is a Jacobian, because the varieties 
in the isogeny class determined by /g are absolutely simple (see (SJ Thm. 6]). By 
explicitly enumerating the genus-2 curves over Fg one finds that the curve given 
above is the only curve whose Jacobian has Weil polynomial /g. □ 
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Suppose, to get a contradiction, that C is a genus-5 curve over Fs with Weil 
polynomial /sfff- Since the resultant of the real Weil polynomials associated with 
/s and (78 is 2, Lemma [7] shows that there is an exact sequence 

O-^A^AxB^JacC-^O, 

where A and B are abelian varieties over Fg with Weil polynomials fs and ^f, 
respectively, and where the projections A x B ^ A and A x B ^ B induce 
monomorphisms A ^ A[2] and A ^ B[2]. Since JacC is a Jacobian and hence 
has a principal polarization. Lemma [7] shows that A is self-dual. Furthermore, A 
is nontrivial, because the principal polarization on Jac C is indecomposable. 

Every finite group-scheme G in characteristic p can be written as a product of 
four sub-group-schemes: 

G = Giod,icd X Grodjoc X Gloc,rcd X Gloc,loci 

where Grcd,rod is a reduced group-scheme whose Cartier dual is reduced, where 
Grcdjoc is a reduced group-scheme whose Cartier dual is local, and so on. (See [HI 
§L2].) A group-scheme of p-power rank in characteristic p can have no reduced- 
reduced part. Furthermore, if G is self-dual — for example, if G is the kernel of a 
polarization — then Grcdjoc and Gioc,rod are dual to one another. 

Now, B is an ordinary abelian variety, and the kernel of multiplication-by-p on 
an ordinary abelian variety in characteristic p has no local-local part. Thus B[2\ 
consists of a reduced-local factor of rank 8 and a local- reduced factor of rank 8. 

The variety A is not ordinary, so A[2] has a local-local component. However, 
A has positive 2-rank, so A[2] has a reduced- local component as well. The only 
possibility is that A[2] has a reduced-local component of rank 2, a local-reduced 
component of rank 2, and a local-local component of rank 4. 

There are supposed to be monic maps from A to A[2] and to B[2]. Since A 
can be viewed as a subscheme of B[2] it can have no local- local part. Thus, the 
monomorphism A A[2] must take A onto the product of the reduced- local and 
the local-reduced part of A [2]. Since A is self-dual, it follows that A has rank 4 and 
is the product of a rank-2 reduced-local group and a rank-2 local-reduced group. 

As in the proof of Lemma [71 let fiA and fis be the degree-4 polarizations on 
A and B that we get by pulling back the canonical polarization of Jac G via the 
map A X B ^ Jac G. We know that A is isomorphic to ker fiA and to ker fiB ■ The 
local-reduced subgroup of ker/i^ is maximal isotropic, so the polarization fiA on 
A gives rise to a principal polarization on the quotient of A by this subgroup. It 
follows from the claim we made above that this quotient variety is the Jacobian of 
the curve D. 

We can make a diagram 

A ^ A 



Jac D — > Jac D 

where the left arrow is the degree-2 isogeny A JacD, the right arrow is the dual 
of this isogeny, and the bottom arrow is the canonical polarization on Jac-D. 

Now, Jac D has exactly one reduced-local subgroup of order 2, and it is defined 
over F2. It is in fact the kernel of multiplication by 1 -I- tt, so JacD divided by 
this subgroup is geometrically isomorphic to JacD. Now, the composition of the 
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bottom and right arrows gives an isogeny Jac D ^ A whose kernel is reduced-local 
and of order 2. So geometrically, A is isomorphic to JacD, which means that A is 
a twist of JacD. But A is isogenous to JacD over Fg, and the quadratic twist of 
JacD is not isogenous to JacD (as we can see by checking Weil polynomials), so 
A must be isomorphic to Jac I? over Fg. It follows that A is isomorphic to JacD 
as well. Thus A, and the polarization /xa, can be defined over F2. 

On the other hand, B and the polarization fiB can be defined over F2 simply 
because Z[p,p] = 'Z[p^,'p^]. (This is essentially the Galois descent argument that 
Serre gives in [23j and in the appendix to [15 .) This means that the whole diagram 

Ax B — > Ax B 




Jac C — > Jac C 



can be descended down to F2. 

Now we want to know whether we can have a curve C over F2 with Weil poly- 
nomial equal to /2ff2- Again we find that C must be a double cover of a genus-2 
curve D with Weil polynomial /2. But then we find that C has 13 points over F4 
and D has 4 points over F4, and this is impossible. □ 



6. Exhaustive searches over small spaces 

In this section we will give three examples that show how Theorem [T] can give us 
enough information about a curve with a certain number of points for us to have a 
computer look at every such curve and bound its number of rational points. 

6.1. The case q = 27, g = i, N — 66. We showed in Section that a genus-4 
curve over F27 with exactly 66 rational points must be a double cover of an elliptic 
curve with Weil polynomial x"^ + 8x + 27. There are exactly 4 elliptic curves over 
F27 with this Weil polynomial; one of them is defined over F3, and the other three 
are Galois conjugates of one another. Given such an elliptic curve E, we will show 
how the genus-4 double covers C of E can be enumerated by computer. 

The function field of C must be obtained from that of E by adjoining a root of 
z"^ = /, where / is a function on E. By the Riemann-Hurwitz formula, in order for 
C to have genus 4 the divisor of / must be of the form 

Pi + --- + Pe + 2D, 

where the Pi are distinct geometric points on E and where D is a divisor of de- 
gree —3. There is a function g on E such that 

D + divg = Q - 4oo, 

where 00 is the infinite point on E and where Q is a rational point on E. Replacing 
/ with fg^ does not change the double cover of E. Thus, we may assume that C 
is given by adjoining a root of = /, where / is a function on E whose divisor is 
of the form 

Pi + --- + Pe + 2Q-8oo. 

We can also change the map C ^ E by following it with a translation map on E. 
Translating E hy a rational point R has the effect of replacing / with a function 
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whose divisor is 

{Pi+R) + --- + (P6 + R) + 2(0 + R)-8R 

(where the sunis in parentheses take place in the algebraic group E) . By modifying 
this new / by the square of a function we can get the divisor of / to be 

{Pi+R) + --- + {Pe + R) + 2{Q - 3R) - 800. 

If we choose representatives of the classes of £(¥27) modulo 3E{¥27), then we may 
assume that Q is one of those representatives. It turns out that for each of the 
possible curves E the group E{¥27)/3E{¥27) has order 3, so for each E we need 
consider only 3 possible Q's. We can choose our Q's so that they do not lie in £^[2]. 

Let us write E in standard Weierstrass form y'^ = + ax^ + bx + c and try to 
write down all of the functions / as above in a standard form. There are two cases 
to consider, depending on whether or not any of the Pi is 00. 

Suppose that one of the Pi is oc'. Then / has degree 7 and its only pole is at 00, 
and / has a double zero at Q. Since Q is not a 2-torsion point by assumption, 
we may write Q = (xo,yo) with yo ^ 0. Note that then x — xq is a uniformizing 
parameter at Q. Let /o be a linear polynomial that defines the tangent line to E 
at Q. Then up to squares / can be written as 

/ = ±(/l+Co/o), 

where fi is a function of the form 

{x — xo)^ ■ (polynomial in x of degree < 1) 

+ (x — xo)(y — yo) • (monic linear in x). 

Likewise, if no Pi is 00, then we may write / = ±(/i + co/o) where /i is a function 
of the form 

(x — xo)^ • (monic quadratic in x) 

+ {x — xo){y — yo) ■ (polynomial in x of degree < 1). 

It is not hard at all to have a computer algebra system write down all of these 
possible /'s for a given E. 

Now our problem is to count the points on the extension of E defined by z"^ = f. 
It is easy to get an overestimate: If P is a rational point on E for which f{P) is a 
nonzero square, then there are two rational points of C lying above P. If f{P) is 
not a square, then there are no rational points of C above P. If P is a simple or a 
triple zero of /, then there is one rational point of C above P. And if P is a double 
zero of /, then there are at most 2 rational points of C lying above P. 

What we actually did in practice for each candidate / was to: 

(1) Eliminate / from consideration if we could find more than three points P 
on E with /(P) nonsquare; 

(2) Calculate the overestimate for #C(F27) described above; 

(3) Discard / if the overestimate was less than 66; 

(4) Check to see that the divisor of / was of the proper form, and discard / if 
it was not. 

No candidate f's made it through these filters, so we never had to worry about 
resolving the singularities of our model for C to get an exact point count. 
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It took a little more than twelve hours using Magma 2.9 on a 400 MHz PowerPC 
G4 processor to search through all of the {E, /) pairs that we had to consider. (Our 
Magma program is available at the URL mentioned in the acknowledgments.) Note 
that we need only consider two E's; if one of the E's that is defined only over F27 
has a double cover with 66 points, then so do all of its conjugates. 

6.2. The case q = 32, g = 4, TV = 75. We showed in Section that a genus- 
4 curve over F32 with exactly 75 rational points must be a double cover of an 
elliptic curve with Weil polynomial a;^ + 9a; + 32. There are exactly 5 elliptic curves 
over F32 with this Weil polynomial, and they are all conjugate to one another 
over F2. (If a € F32 satisfies + + 1 = then the elliptic curve E defined 
by y'^ + xy — x'^ + x'^ + has the correct Weil polynomial.) As in the preceding 
section, we can easily program a computer to enumerate the genus-4 double covers 
of such an elliptic curve and check to see whether any of these double covers has 
75 points. The only complication is that a double cover in characteristic 2 is given 
by an Artin-Schreier extension of function fields instead of a Kummer extension. 

Suppose C is a double cover of the curve E given above. Then the function field 
of C is obtained from that of E by adjoining a root of + z = /, where / is a 
function on E. The points of E that ramify in the cover C ^ E are contained in the 
set of poles of /; to determine whether a pole P of / is a ramification point, and to 
determine the contribution of P to the different of the extension C ^ E, we look at 
the expansion of / in the local ring of E at P. According to [27l Prop. III. 7. 10], if 
there is a function gp such that f+gp+gp has no pole at P, then P is unramified. If 
there is no such function, then we can at least find a function gp so that f + gp + gp 
has a pole of odd order at P. If the pole has order to, then the differential exponent 
of P in the extension C ^ i? is m + 1 . 

Suppose for each pole P of / we find a function gp as above. Then by Riemann- 
Roch we can find a function g on E that has poles only at 00 and at the poles P 
of / and such that g — gp has no pole at P for every P ^ 00. Replacing / by 
f + g^ + g does not change the extension C E, but it allows us to assume that / 
has only odd-order poles, except perhaps at infinity. By modifying / in this same 
way by functions with poles only at 00, we may also assume that if / has an even 
order pole at infinity, then the order of the pole is at most 2. 

Now suppose that C has genus 4 and has 75 rational points. Then the Riemann- 
Hurwitz formula shows that there are three possible configurations for the different 
of C ^ E: There are either 

(1) three points with differential exponent 2, 

(2) one point with differential exponent 2 and one with differential exponent 4, 
or 

(3) one point with differential exponent 6. 

The second possibility cannot occur, because each of the ramification points would 
have to be rational over F32, and this would force C to have an even number of 
rational points. 

Suppose we are in case (3). Then the one ramification point P is rational, and 
by following the map C ^ E with a translation by — P, we may assume that the 
point P is the infinite point 00 on E. Modifying the corresponding / as above, we 
find that we may assume that / is a function of degree 5 whose only pole is at 00. 
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Thus we may assume that / has the shape 

/ = {ax + b)y + {cx + d) 

where a 7^ 0. Furthermore, by modifying / by constants of the form + e, we may 
assume that d is either or 1. 

Suppose we are in case (1), with ramification at Pi, P2, and P3. Since C has an 
odd number of rational points, at least one of the Pi is rational. If we label this 
point P3 and then translate by — P3, we find that we may assume that P3 = 00. We 
may also assume that neither Pi nor P2 is the unique 2-torsion point on E (that 
is, the unique point with x = 0), because if (say) Pi is the 2-torsion point on we 
can translate by — P2 so that the ramification locus becomes {Pi — P2,oo,— P2}. 
Thus we may write Pi = {xi.yi) and P2 — (x2, 2/2) with xi 7^ and X2 7^ 0. Then 
we may write / in the form 

f , + + , y + y2 + x2 ^ , 

J — ax + h c h a 

X + Xi X + X2 

where b and c are nonzero, where d is either or 1, and where a is nonzero if and 
only if / has a pole of order 2 at 00. Note that if Pi and P2 are not defined over 
F32 then they are quadratic conjugates of one another, and so b and c must be 
quadratic conjugates of one another in order for / to be defined over F32. 

It is a simple matter to count points on the curve C defined by + 2: = /, where 
/ is as above, because we are assuming that every pole of / ramifies. So if P is a 
rational point on E that is a pole of /, then there is one point on C lying above P. 
If P is a rational point that is not a pole of /, then there are either two or zero 
rational points on C over P, depending on whether the trace of /(P) to F2 is 
or 1. 

We used Magma to enumerate all of the possible /'s for one of the elliptic curves 
E given above. (Our Magma program is available at the URL mentioned in the 
acknowledgments.) For each / we counted points on the curve + z = /. No / 
gave us 75 points. Thus we verified that there is no genus-4 curve over F32 having 
exactly 75 rational points. 

6.3. The case q = 3, g = 6, N = 15. In Section l47fl we showed that there were two 
possible real Weil polynomials for a genus-6 curve over F3 having 15 points. One 
of the two polynomials was {x + 2)^(a;^ + 3a; — l){x'^ +4:X + 2), and we showed that 
any curve C with this real Weil polynomial must be a double cover of the genus-2 
curve D defined by = x^ + x^ + x"^ + x"^ — x + 1. We note that C has 15 places of 
degree 1 and 53 places of degree 5, and the proof of Lemma [8] shows that therefore 
a degree-1 place and a degree-5 place of D must ramify in the double cover C ^ D. 
(Since the degree of the different of the cover is 6 by Riemann-Hurwitz, no other 
places of D can be ramified.) In this section we will show how one can make a short 
list of double covers of D that contains all of the genus-6 covers ramified only at 
a degree-1 place and a degree-5 and having 15 rational points. We will find that 
there are no such double covers. 

Note that the automorphism group of D is cyclic of order 8, generated by the 
map {x,y) 1-^ ((1 -I- x)/{l — x),y/{l — x'^)). This group acts transitively on the 
rational points of D, so we may assume that the rational ramification point of the 
double cover C ^ D is our favorite rational point on D. We will choose this point 
to be the rational point on D that is a pole of the function x and a zero of the 
function y — x^, which point we will denote by 00^ . 
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Let K be the function field of D and let L be the function field of C. Then there 
is a function / on D such that L — K{z) for an element z with ~ /. Let P be 
the degree-5 place at which C D ramifies. Then the divisor of / is P — 5oo~^ + 2E 
for some degree-0 divisor E on D. By Riemann-Roch, there is a function g on D 
whose divisor is — 2oo+ — E for some effective degree-2 divisor F. Replacing 
z with zg and / with fg^, we find that we may assume that the divisor of / is 
P + 2F — 9oo+ for some effective divisor F of degree 2. 

The divisor F must have one of four possible shapes, each considered below. For 
each possibility, we had Magma check that that there is no function f on E whose 
divisor is of the right form and that gives an extension with 15 points. (Our Magma 
routines for doing this are available at the URL mentioned in the acknowledgments.) 

Case 1: F consists of one place of degree 2. Since D has 8 rational points and C 
has 15, we see that the rational points of D that do not ramify in the double cover 
C D must split. Since / is nonzero at the rational points of D other than oo"*" 
and since these points all split, / must evaluate to 1 at these points. It is a simple 
matter to enumerate all of the elements of the Riemann-Roch space £(9oo+) that 
evaluate to 1 at the other rational points of D, and to check that none of them has 
a divisor of the form P + 2F — 9oo+ for a degree-5 place P. 

Case 2: F consists of two possibly equal places of degree 1, neither equal to oo"*". 
To handle this case, we consider all possible pairs of points Fi and F2 on D. For 
each pair, we have Magma enumerate the elements of C{^oo'^) that vanish at Fi 
and F2 and that evaluate to 1 at the other rational points on D. For each such 
function, we check that its divisor is not of the form P -I- 2Fi + 2F2 — 9oo+ for a 
degree-5 place P. 

Case 3: F consists of 00+ and some other degree-1 place. Now we loop over all 
rational points Fi ^ cxd+ of D, and consider the elements of £(7oo+) that vanish at 
Fi and that evaluate to 1 at the other rational points of D. For each such function, 
we check that its divisor is not of the form P + 2Fi — 7oo+ for a degree-5 place P. 

Case 4: F consists of two copies of 00^ . For this case we must consider the elements 
of £(5cx)+) that evaluate to 1 at the other rational points of D. It turns out that 
the only such function is the constant function 1. 

Thus we find that there are no curves over F3 having real Weil polynomial 
{x + 2f{x^ -f 3a; - l){x^ + Ax + 2). 

7. Triple covers of elliptic curves in characteristic 3 

Note: In the original version of this paper, the results of Section 17.21 were incor- 
rect; since we used these results in Sections 7.3 and 7.4, we have had to come up 
with new arguments for the results of those sections. These new arguments can be 
found in the second Appendix. 

We therefore no longer have any need for the results of Sections 17.11 and 17.21 
Nevertheless, we have decided to include the corrected versions of these sections in 
this version of our paper, in case the results will be useful for some other purpose. 
Sections 7.3 and 7.4 have been deleted. 
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7.1. A convenient standard form. Suppose fc is a finite field of characteristic 3, 
suppose E is an elliptic curve over k, and suppose C is a curve over k for which 
there is a degree-3 map C ^ E. We will show that C can be given in a conve- 
nient standard form. We will limit ourselves to covers C E for which a certain 
assumption (stated below) holds. 

Let L and K be the function fields for C and E, respectively, and view L as a 
degree-3 extension of K via the degree-3 map C E. Choose a generator for L 
over K whose trace to ii" is 0. Then there are functions / and g in K such that 

— fz — g = 0. Suppose we write the divisor of / in the form 

div / = Pi + • • • P„ + 2D, 

where the Pi are distinct geometric points of E (and where n is necessarily even). 
Note that since / is (up to squares) the discriminant of the extension L/K, the 
number n is the number of points of E at which the discriminant of L/K has odd 

valuation. 

Assumption. We will assume that n is coprime to ^E{k). 

Under this assumption, there is a rational point Q on E such that nQ = Pi + 
■ ■ ■ + Pn in the group of points of E. By composing the given map C ^ E with a 
translation, we may assume that Q is the infinite point oo on E. By replacing the 
divisor D above with D + (n/2)oo, we may write 

div/ = Pi H \-Pn-noo + 2D 

where the Pj are distinct geometric points on E whose sum is in E. It follows 
that D is a degree-0 divisor, and the sum (in E) of the points in D is a fc-rational 
2-torsion point on E. But since jj=E{k) is coprime to the even number n, the only 
fc-rational 2-torsion point on is oo. Therefore D is a principal divisor, because 
it has degree and the siun (in E) of its points is zero. Write D = div/i for some 
function h. Replacing z, /, and g with z/Zi, f /h?, and g/lv^, respectively, we find 
that we still have z^ — fz — g = 0, but now the divisor of / is 

div / = Pi H + Pn — noo. 

If one of the Pi (say P„) is equal to oo, replace n by n — 1 and delete the point P„ 
from the expression for div/. The integer n may no longer be even, but now we 
have that the P, are all distinct and that none of them is oo. We do at least know 
that n is not 1, because there is no function on E with divisor P — oo. 

Now suppose P is a finite place of E at which g has a pole. Suppose ordp^i is 
a multiple of 3, say ordp^ = —3m for some positive m. Then there is a function 
h on E that has poles only at P and at oo such that ordp(g — + fh) > —3m. 
Replacing z with z — h and g with g — + fh, we find that we have reduced the 
order of the pole of g at P. Repeating this process, we find that we may assume 
that for every finite pole P of g, the order of g at P is not a multiple of 3. 

Suppose g has a pole at oo, and suppose ordooff is less than — 3n/2. If ordoo5 
is a multiple of 3 and is less than —3, then we can find a function h, with poles 
only at oo, such that ordoo(.g — h^ + fh) > ordoo g- Again we may replace z with 
z — h and g with g — h^ + fh to reduce the order of the pole of (/ at oo. Repeating 
this procedure, we may assume that if ordoo g is less than — 3n/2 and less than —3, 
then ordoo g is not a multiple of 3. 

Let us say a pair (/, g) of functions on E is well- conditioned at a point P of E 
if one of the following conditions holds: either 
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(1) the order ordp g of g at P is not a multiple of 3, or 

(2) we have 2 ordp 5 > 3 ordp /. 

We have shown that every triple cover of E has a model — fz = g such that 
/ has no poles outside co and no multiple zeros anywhere, and such that (/, g) is 
well-conditioned at every finite pole of g. Furthermore, the model can be made to 
satisfy the additional requirement that {f,g) be well-conditioned at 00, unless / is 
constant and g has a triple pole at 00. 

7.2. Contributions to the different. Suppose L/K is a field extension of the 
type considered above, given in the standard form z^ — fz — g = described in the 
preceding section. Given a point P onE, we would like to calculate the contribution 
at P to the different of the extension L/K. The basic fact we will use is that if L/K 
is a degree-3 Artin-Schreier extension of local fields given by an equation z'^ — z — h, 
where the valuation of h is n, then the degree of the different is zero if rt > and 
is 2 - 2n if n < and n ^ mod 3. (This follows from [13 Prop. III.7.10], for 
example.) Since the contribution to the different is stable under base extension, we 
may assume that the base field k is the algebraic closure of F3. 

Suppose we are given P on E with ordp / even. Note that by the way we 
normalized / and g, either 2 ordp g > 3 ordp / or ordp g ^ mod 3, except in the 
case when P = 00 and ordp g = —3 and ordp / = 0. Let us suppose we are not in 
this exceptional case. Note that if / is nonconstant we will not be in the exceptional 
case. 

In the completion of X at P the function / is a square, say f — for some 
s e Kp. Locally at P the extension Lp/Kp is given by the equation — w = 
g/s^, and the valuation of g/s^ is oidp g — (3/2) ordp/. Since we are not in the 
exceptional case, this valuation is either positive or is not a multiple of 3. Thus the 
contribution to the different at P is 

if 3ordp/-2ordpg < 0; 

2-1-3 ordp / — 2 ordp g if 3 ordp / — 2 ordp g > 0. 

In particular, note that when ordp / is even the contribution at P to the different 
is even, and is at least 4 if it is nonzero. 

Suppose we are given P on E with ordp / odd. Suppose also that (/, g) is well- 
conditioned at P, so that either 2 ordp 5 > 3 ordp / or ordp 17 ^ mod 3. Then 
our completed extension Lp/Kp fits into a diagram 

Lp — > L'p 
Kp K'p 

where K'p and L'p are obtained from Kp and Lp hy adjoining a square root s 
of /. The extension L'p /K'p is given by the equation — w = g/s^. Let P' 
be the prime of K'p. If the P'-adic valuation of g/s^ is nonnegative (that is, 
if 2 ordp (7 — 3 ordp / > 0) then there is no ramification in L'p /K'p, and so the 
ramification in Lp/Kp is tame. In this case the contribution at P to the different 
oiL/K \s 1. On the other hand, if 2 ordp g — 3 ordp / < then the P'-adic valuation 
of g/ is negative and not a multiple of 3, so the Galois extension L'p/ K'p is totally 
ramified. In particular, L'p is a field. Let p be the prime of L'p lying over P. Then 
P' = p^, the prime of Lp is p^, and P = p'^. 
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Let us calculate the difTerent of L'p/Kp in two different ways. First of all, we 
note that the different of L'p/K'p is 

s; , _ „2+2m 

where m = 3 ordp / — 2 ordp g. Next, we note that the extension K'p / Kp is tamely 
ramified, so its different is 5k'p/Kp = P' = ■ Likewise, the different of L'p/Lp is 
^L'p/Lp = P- Thus, if the different of Lp/Kp is ^LpIKp — (P^)": we have 

5lp/Kp5l'p/Lp Sii'p/Kp^L'p/K'pi 

so that p2"+i — p3+2+2m^ foUows that the contribution n of the different of L/K 
at P is n = 2 + 3 ordp / — 2 ordp g. 

Thus, when ordp / is odd and (/,<?) is well-conditioned at P, the contribution 
to the different at P is 

1 if 3 ordp / - 2 ordp g < 0; 

2 + 3 ordp / — 2 ordp g if 3 ordp / — 2 ordp g > 0- 

Now suppose P is a point for which ordp / is odd and (/, g) is not well-conditioned 
at P. Since (/, g) is well-conditioned at infinity unless / is constant, we know that 
P is a finite point; furthermore, our normalization of / and g shows that ordp / = 1. 
Also, since (/, g) is well-conditioned at every finite pole of g, we see that ordp g is 
non-negative. The only possibility is that ordp g = 0. 

Let cp € fc be the negative of the cube root of the value of g at P. Then 
g + Cp — cpf has a zero at P, and (/, g + Cp — cpf) is well-conditioned at P. Note 
that over k the triple cover — fz = g + Cp — cpf is isomorphic to the triple cover 
z^ — fz — g, so we have reduced the computation of the differential contribution to 
the case we considered earlier. 

To summarize: If ordp / is odd, let cp be an element of k such that either 
2ordp(g + Cp — cp/) > 3 ordp / or ordp{g + Cp — cp/) ^ mod 3. Let gp = 
g + Cp — Cp f . Then the contribution to the different at P is 

1 if 3 ordp / — 2 ordp gp < 0; 

2 + 3 ordp / — 2 ordp gp if 3 ordp / — 2 ordp gp > 0. 

In particular, when ordp / is odd the contribution at P to the different is odd. 

8. An argument on Hermitian forms 

In this section we prove a theorem of Savitt |19j : 

Theorem 16. There is no genus-A curve over Fg with exactly 27 rational points. 

Proof. Suppose such a curve C existed. It has defect 2 and so we know that C 
must be of type [m, m,m,m — 2] or of type 

[m + (-1 + V5)/2, m + (-1 - \/5)/2, m + (-1 + V5)/2, m + (-1 - \/5)/2], 

where m — 5. Corollary [9] eliminates the first possibility, so C must be of the 
latter type. It follows that the Weil polynomial of C must be /^, where / = 
x'^ — 9x^ + 35x^ — 72x + 64. Our proof of Savitt's theorem is completed by the 
following proposition, which shows that every principal polarization of an abelian 
variety with Weil polynomial /^ is decomposable. □ 
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Proposition 17. There is exactly one abelian variety A overWs with Weil polyno- 
mial f . Up to isomorphism, the variety A has exactly one principal polarization A. 
Furthermore, up to isomorphism there is exactly one principally polarized abelian 
variety over Fg with Weil polynomial f^, and it is isomorphic to (A x A, X x X) . 

Let K be the quartic number field defined by the polynomial / and let Ok denote 
the ring of integers of K. Om proof of Proposition [17] will depend on a result about 
Hermitian forms over Ok- We will state this result now and use it in the proof of 
Proposition 1 17( but we will postpone its proof until later in this section. 

We will see that K is the totally imaginary biquadratic extension Q(\/^3, \/5) 
of the totally real field K'^ — Q(-\/5); we refer to the nontrivial automorphism of K 
over K'^ as complex conjugation, and we denote the complex conjugate of x G -ftT 
by X. Let M2{Ok) denote the ring of 2-by-2 matrices over Ok- If C is an element 
of M2{Ok) we let C* denote its conjugate-transpose. 

Proposition 18. Suppose A is an invertible Hermitian matrix in M2{Ok) that is 
totally positive {meaning that all of the roots of its minimal polynomial are totally 
positive algebraic numbers). Then there is an invertible C G M2{Ok) such that 
A = C*C. 

Let us assume this result for the time being, and proceed with the proof of 
Proposition [T71 

Proof of Proposition 1171 We begin by setting some notation related to the number 
field K. 

Let TT be a root of / in K, let tt = S/tt, and let R = Z[7r,7f]. Let ip — tt + 7f — A 
and let C = 17 — 67r + TT^ — Stt. It is easy to check that then (^^ — (^ — 1 = and 
("^ + C + 1 = 0, and from these relations we see that K is isomorphic to Q(V— 3, \/5) 
and that R is the full ring of integers of K. 

It is not hard to show that the Dedekind domain i? is a PID [TT]; in fact, 
Lemma [20] below shows that R is norm-Euclidean. 

Note that the middle coefficient of / is coprime to 8, so there is an isogeny class 
of ordinary abelian varieties over Fg with Weil polynomial /. In fact, according to 
a result of Deligne [3] , the abelian varieties in this isogeny class correspond to the 
isomorphism classes of i?-modules that can be embedded in K as lattices. Since R 
is the full ring of integers of K and since R has class number 1, there is exactly one 
such isomorphism class of i?-modules, and therefore there is exactly one abelian 
variety A over Fg with Weil polynomial /. This proves the first statement of the 
proposition. 

Theorem 1.3 of [^ shows that the abelian variety A has a principal polarization A. 
Now suppose fj, is another principal polarization of A. Then we know from |f7l 
Application III, pp. 208-210] (see especially the final paragraph) that there is a 
totally positive unit u of the maximal real subfield of K such that = Xu. But 
every totally positive unit of = Q(-\/5) is an even power of the fundamental 
unit Lp, so there is a unit v of with u = v"^ ^ vv. Then the automorphism v 
of A gives an isomorphism of the polarized varieties {A, A) and {A, /i). This proves 
the second statement of the proposition. 

Applying Deligne's theorem again, we find that the abelian varieties over Fg 
with Weil polynomial correspond to the isomorphism classes of i?-modules that 
can be embedded as lattices in the if -vector space K x K. Since i? is a Dedekind 
domain, such modules are determined up to isomorphism by their Steinitz classes 
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in the class group of R. But the class group of R is trivial, so there is only one such 
i?-niodule. Thus, the only abelian variety with Weil polynomial is A x A. 

Now suppose that /i is a principal polarization on Ax A. Let a be the automor- 
phism o (A X A) of Ax A. Using the results of [T7| Application III, pp. 208-210] 
again, we see that a is fixed by the Rosati involution associated to A x A and that 
a is totally positive, meaning that all of the roots (in the algebraic closure of K) of 
the minimal polynomial of a are totally positive algebraic numbers. If we identify 
End(y4 X A) with the ring M2{R) of 2-by-2 matrices over R in the obvious way, 
then the Rosati involution is the conjugate-transpose involution, so we see that a 
is identified with a totally positive Hermitian matrix A of determinant 1. Thus, 
to show that fi is isomorphic to A x A, we must show that every such Hermitian 
matrix can be written C*C, where C S M2{R) is nonsingular and where C* is the 
conjugate transpose of C. But this is exactly the statement of Proposition [181 O 

Before we prove Proposition [18] we must set some notation and give a Euclidean 
algorithm for the ring R. 

Let L be the subfield Q(C) of K and let Ol be the ring of integers Z[C] of L. Let 
(j) be the real number (1 + ■\/5)/2 and let tpi and ^2 be two distinct embeddings of 
K into C that are not complex conjugates of one another. If z is a complex number, 
we let \z\ be its magnitude and we let ||z|| be its norm, so that ||z|| = |zp = zz. 

Lemma 19. For every x in K there is a y in R such that 

Norm^/Q(x - y) < 5/9 

and such that 

\\Mx-y)\\<c^V5 for I ^1,2. 

Proof. Let D be the set of elements of L whose norm to Q is at most 1/3. Then 
for every x in L there is a y in Ol such that x — y lies in D. (It is easiest to see 
this by embedding L in the complex numbers, so that D becomes the intersection 
of L with the disk at the origin of radius 1 / The latter disk clearly contains a 
fundamental region for the lattice Ol-) 

Write X = xi + X2^p for xi, X2 G L. Choose yi and y2 in Ol such that xi — yi 
and X2 — 2/2 he in D. Let y — yi + y2(p and let zi — xi — yi and Z2 = a;2 — y2- Then 

NoTniK/Q,{x -y) = NormL/Q(Normx/L(2^i + Z2(p)) 
= NormL/Q(zi + 2122 - 

= W^iiA + ^1^2 - ^2)11 

= \\d\ + d^d2-dl\\ 

where di = Tpi{zi) and d2 = "01 (-22) are complex numbers that lie in the disk 
around the origin of radius l/\/3- But an easy maximization argument shows that 
the maximum value of \\d\ + did2 — cJlH for di, c?2 in this disk is 5/9. 

Also, ^i{x—y) is equal to either di-|-d2(l-l--\/5)/2 or di+d2{l~V^)/2, depending 
on the image of (/? under ipi. Since and \d2\ are both at most l/-\/3, we see that 

so that ||V'z(a; - ?/)|| < 0^/3. □ 
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We note that the 5/9 in Lemma [T9l could be reduced to 4/9 if we used a hexagonal 
fundamental domain for the lattice Ol in place of the disk D, but doing so takes 
some effort and does not help much in the end. 

Lemma 20. Suppose n and d are elements of Ok, with d nonzero. Then there are 
elements q and r of Ok such that n = qd + r and such that 

NoTuiK/Qir) < (5/9)NormK/Q(d) 



mr)\\<^md)\\ 



fori = 1,2. 



Proof. Apply Lemma 1191 to x = n/d, and let q be the resulting y. Then let r — 
n — qd. The lemma follows from the inequalities of Lemma 1191 □ 

We are now ready to prove Proposition [TBI 

Proof of Proposition ]lE[ Write 

. /3 7 

for a, 7 in the ring of integers of the maximal real subfield = 'Q_{(p) of K and 
for /3 in R. Our strategy will be to modify A by invertible matrices C (that is, to 
replace A with C*AC) in order to make the norm of the upper left hand element 
of A as small as possible. 

The determinant of A is a totally positive unit in K^, and so is an even power 
of the fundamental unit (p. By modifying A by a matrix C of the form 







we may assume that A has determinant 1 . Then by modifying A by a power of the 
matrix 

' if 

ip-- 

we can ensure that the element a of Ok+ has the property that 

J_ < ^iM < 

<j) i/'2(a) 
Another way of expressing this is to say that 



(1) 



1 



< 



< 



for i = 1,2. 



Apply Lemma [ 



I with n — (3 and d — a io get a q and an r with 



< 



((/) /3)||'(/'i(ck)|| and with Norm;f/Q(r) < (5/9) Norm^/Q(a). If we set 



then 



C 



C*AC 



a 
r 



r 

i 
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for some 7' in Oj. Replace /3 with r and 7 with 7', so that now we have 

(2) \mm<'^\mc^)\\ for * = 1,2 

and 

(3) NormK/Q(/3) < (5/9)NormK/Q(a). 

Let B = [3(3, so that B is an clement of O^. Note that we have aj ~ B ~ 1, so 

^^{a)MJ) = + MB) for I = 1,2 

and 

(4) i^,(7)M(a) = lM(a)2 + V,(B)M(a)2 fori = 1,2. 
Now let 

ci = l/i>i{a^) 
C2 = l/-02(a^) 

so that equation ^ becomes 

V'i(7)/i/'i(a) = 61 + ci and V'2(7)/V'2(a) = &2 + C2. 
Multiplying these last two equalities gives 

(5) Norm;f+/Q(7/Q;) = 6162 + ^iC2 + 62C1 + C1C2. 
Note that 

^ Normj^+/Q(B) ^ NormK/Q(/3) ^ 5 
^ ^ Normj^+/Q(a)2 Normx/Q(Q!) ~ 9 

(where the final inequality comes from ([3])) and 

1 



Normjf+/Q(Q;2) 
Furthermore, from inequality ([T]) we see that 

(8) ci < — — and C2 < 



Normif+ /Q (a) Normx+ /q (a) ' 

and from inequality ^ we see that 

If we view 61, &2j ci, and C2 as non- negative real variables subject only to the 
conditions expressed in equations ([6]), ([7]), (H]), and ([9]), and if we maximize 61 ci + 
&2C2 subject to these conditions, we find that the maximum value occurs when 
bi — <\>^ l?> and c\ = i^^/ Norm/f+/Q(a). Thus we have 

(10) 51C1+62C2 < — — — T-T + TTJT^T^TIT- 7-^< 



3 Normx+/Q(Q!) /3) Normi<-+/Q (a) Norm/f+/Q(a) 

Let e = 1/ Norm;f+/Q(a). Then by combining the relations (O, (IHl), Q and ([1 
we find that 

Norm^+/Q(7/a) < + 6.08e + 5/9. 
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If Norm^+/Q(a) > 15 then e < 0.07 and Norm^+/Q(7/a) < 1. Then we can 
modify A by 

"0 1 " 
1 

to exchange a and 7, and this decreases the norm of the upper left hand element 
of A. 

We repeat this procedure until we reach the point where NoTinx+ /Q{a) < 14. 
Up to Galois conjugacy there are 5 possible values for a: namely, 1, 2, 2 + ip, 3, 
and 3 + 93. Inserting the appropriate values of ci and C2 into equation ([5]) and 
maximizing over bi and 62, we find that we once again get Norm/f+/Q(7/a) < 1 
except when Q; = lora = 2ora = 2 + (/7. 

Note that 1 + /3/3 is divisible by a. If a = 2 + then there are 6 possible residue 
classes modulo a that (3 could lie in. By modifying A by a power of 

"1 " 

.0 C. 

we can arrange that (3 = 2. Then A must be the matrix 

' 2 + ip 2 

2 2+Tp ' 

Modifying A by 

\ l-(p 1 ' 
. V -1_ 

gives us the identity. 

For a = 2 there are three possible residue classes for (3. By modifying A by a 
power of 

r 1 " 

.0 C. 

we can arrange for /? to be 1. Then 7 = 1, so again we can reduce the norm of the 
upper left hand corner of A by interchanging a and 7. 

We finally get to the case a = \. If a = 1 then we can reduce (3 to be 0. Then 
we find 7 = 1, so that we have reduced A to the identity matrix. □ 

Appendix I: Sample Magma output 

In this appendix we reproduce the output produced by our Magma program for 
the case g = 4, 5 = 5, iV = 18. 

Magma V2.9-10 Fri Sep 27 2002 17:22:30 [Seed = 729997397] 
Type ? for help. Type <Ctrl>-D to quit. 

> load "CheckQGN. magma" ; 
Loading "CheckQGN. magma" 

Loading "Def icientPolynomialList .magma" 

> CheckQGN(4,5,18) ; 

[ 18, 0, 4, 81, 164 ] 
[ 

<x + 3, 3>, 

<x"2 + 4*x + 2, 1> 

] 

ELIMINATED: Not Weil polynomial. 
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[ 18, 0, 5, 74, 187 ] 

[ 

<x + 3, 2>, 

<x~3 + 7*x"2 + 14*x + 7, 1> 

] 

ELIMINATED: resultant=l method. 
Splitting = [ 1 ] 

[ 18, 0, 6, 67, 210 ] 
[ 

<x + 1, 1>, 
<x + 2, 1>, 
<x + 3, 2>, 
<x + 4, 1> 

] 

ELIMINATED: resultaiit=2 method. 
Splitting = [ 2 ] 

Reasons: point counts, Riemeinn-Hurwitz 

[ 18, 0, 6, 68, 200 ] 
[ 

<x + 3, 1>, 

<x"2 + 5*x + 5, 2> 

] 

ELIMINATED: resultant=l method. 
Splitting = [ 1 ] 

[ 18, 0, 7, 60, 232 ] 
[ 

<x + 2, 2>, 
<x + 4, 1>, 
<x"2 + 5*x + 5, 1> 

] 

ELIMINATED: resultant=l method. 
Splitting = [1, 2 ] 

[ 18, 1, 0, 86, 168 ] 
[ 

<x + 1, 1>, 
<x + 3, 4> 

] 

ELIMINATED: resultant=2 method. 
Splitting = [ 1 ] 

Reasons: point counts, Riemeinn-Hurwitz 

[ 18, 1, 1, 79, 190 ] 

[ 
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<x + 2, 1>, 
<x + 3, 2>, 
<x"2 + 5*x + 5, 1> 

] 

ELIMINATED: resultant=l method. 
Splitting = [ 1 ] 

[ 18, 1, 2, 71, 222 ] 
[ 

<x + 2, 3>, 

<x + 3, 1>, 

<x + 4, 1> 

] 

ELIMINATED: resultaiit=l method. 

Splitting = [ 2 ] 



> quit ; 

Total time: 4.940 seconds, Total memory usage: 9.22MB 

Appendix II: New arguments for two cases 

A new argument for the case q = 3, g = 6, N — 15. Suppose that C is a 
genus-6 curve over F3 with exactly 15 rational points. In Section l477l we showed 
that the real Weil polynomial of the Jacobian J of C must be 

h^{x + 2f{x + 3){x^ + 4:x^ + x~ 3). 

Let F be the unique elliptic curve over F3 with real Weil polynomial x + 2, and let 
B be the abelian surface F x F. Note that B is the only abelian surface over F3 
with real Weil polynomial {x + 2)^. We can show that there is an injection B ^ J 
such that the canonical polarization on J pulls back to a polarization /i on B whose 
degree is 9. By looking at the degree-9 polarizations of B, we see that there will be 
an injection F ^ B such that the puUback of ^ to is a polarization A of degree 
1 or 4. Now consider the composition 

F^ B^ J. 

The canonical polarization on J pulls back via this composition to the polarization 
A of F, and it follows that there is a map from C to F of degree 1 or 2. Certainly 
there is no such map of degree 1. But there are no such maps of degree 2 either, 
because F has 6 rational points and C is supposed to have 15. Therefore there is 
no genus 6 curve over F3 with real Weil polynomial equal to h. 

A new argument for the case q — 27, g = A, N = 65. The appendix to [19] 
shows that a genus-4 curve over F27 with 65 rational points must have real Weil 
polynomial [x + 7){x + 10)^. Suppose C is such a curve, and let J be its Jacobian. 
Let F be the unique elliptic curve over F27 with real Weil polynomial x + 10. 
Note that F^ is the unique abelian threefold over F27 with real Weil polynomial 
{x + 10)^. We see from Lemma[7]that there is a degree-9 isogeny E x F^ ^ J, and 
that the puUback to F^ of the canonical principal polarization on J is a degree-9 
polarization on F^. Using the knowledge of the isomorphism classes of principal 
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polarizations of F'^ that we obtain from Hoffmann's classification [7] of the rank-3 
unimodular lattices over 'Z[^/—2], together with an easy argument that shows that 
every degree-9 polarization of is the puUback of a principal polarization on F^ 
via a 3-isogeny, we can write down representatives for all of the isomorphism classes 
of degree-9 polarizations on F^. For each representative fi, we check that there is 
an embedding F ^ F^ such that the puUback of /i to F is a polarization of degree 
1 or 4. It follows that there must be a map from C to F of degree 1 or 2. A degree-1 
map would be impossible, so there must be a degree-2 map. But it is not hard to 
adapt the method explained in Section [6.1l to enumerate the genus-4 double covers 
of F, and to verify that none of them has 65 points. Therefore there is no genus-4 
curve over F27 having 65 points. 
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